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PREFACE 


The present book is evolved from a course on analytic number theory 
offered at the Mathematics department of Sambalpur University during the last 
25 years. It provides the basic knowledge of number theory and its application 
{6 eryptography suitable for one semester course in the Post Graduate level 
and also serves as a reference book for the teachers and for the beginners in 
fiumber theory. The topics chosen and illustrated in this book are intended to 
provide some depth in the subject. Many problems of much interest are dis- 
Oussed together with some more exercises left for the students. The computer 
programming in BASIC are given at some places which will help students to 
Work out in the computer for practice. In some cases algorithms are also 


described. 


The goal of this work is to attract students to opt for the subject and do 
Sine fruitful researches in this field. Many of the students who have taken this 
Plime during the past 25 years have become professional teachers and contrib- 
jilted to number theory. 


Apart from my students who have taken keen interest in my lectures, my 
sons Chuni and Lulu have always encouraged me in writing this book 


Lastly | acknowledge the authority of Sambalpur university for sanction- 
Hig me sabbatical leave to write this book. 


Makara Sankranti, 2004 - INDULATA SUKLA 
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INTRODUCTION 


The theory of numbers is that branch of mathematics which deals with 
properties of whole numbers, 1, 2, 3, 4, 5... that is positive integers. Numbers, 
specially positive integers were used for keeping records and for commercial 
transaction for over 5000 years before any one thought of studying numbers in 
a systematic way. Many branches of mathematics have their origin in number 
theory. the first scientific approach to the study of integers that, the true origin 
of the theory of numbers, is generally attributed to the Greeks. Around 600 
BC Pythagoras and his disciple made rather thorough studies of integers. 
They classified them to four categories even integers, odd integers, prime 
numbers and composite numbers. 


A prime number is a number greater thar. | whose only divisors are 1 and 
the number it self. Numbers which are not prime are called as composite number. 
But the number 1 is neither a prime nor a composite number. 


Pythagoreans also linked numbers with geometry. When the numbers are 
represented by dots arranged in the form of triangles, squares, pentagons, 
haxagons, septagons. octagons etc. they are called as triangular numbers, square 
humbers pentagonal numbers, septagonal number, octagonal numbers 
respectively . In general if a number is represented by dots arranged in form of 
a polygon then the number is called polygonal number. These numbers specially 
triangular numbers and pentagonal numbers have importance in the study of 
partition theory. 

Around 300 BC Euclid’s Elements a collection of 13 books appeared. 
Three of these 13 books were devoted to the theory of numbers. (BOOK VI, IX 
and X). Euclid was the first mathematician to prove that there are infinite number 
of primes. There are also proofs of this theorem by other eminent mathematicians. 
‘There is also topological proof of this famous Euclid’s theorem. Also we note 
that some primes are represented by the numbers of the form 4k + 1, 6k + 5, 8k 
mo okt l,k=1,2,3,;---- Like Euclids theorem, we have theorems which 
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The prime number theorem tells that 
Lin, 1(x) log x 


x—>00 x 


Eeue 


This conjecture was made independently by Gauss and Legendre. They 
attempted to prove this statement but failed. Later on in 1851 the Russian 
mathematician Chebyshev gave equivalent theorems of this statement. 


Besides prime numbers there are other numbers in the world of numbers 
which have interesting properties. They are amicable numbers, Armstrong 
numbers and Fibonacci numbers. 


Two integers m and n are said to be amicable or friendly numbers if the 
sum of the proper divisors of m is the number n and vice versa. The smallest 
amicable number pair is 220 and 284 because the divisors of 220 are 1, 2, 34, 5. 
10, 11, 20, 22, 44, 55, 110 when added equals to 284 and again the divisors of 
284 are 1, 2,4, 71, 142, when added gives 220. There are other amicable pairs 
also. If the sum of the divisors of an integer n is less than 2n, then it is called as 
‘deficient number’. On the other hand if the sum of the divisors of integer n is 
greater ne 2n, then n is called as abundant number. A sequence of integers Up, 


Uy) ++ Uy» is called Fibonacci sequence ifu, =, u, = Ly Ua = Ut ul 


There are many interesting properties of ete ees It is applied 
in Golden ratio. 


The most emerging field of modern time is the Cryptography, the science 
of making communication unintelligible to all except authorized parties. 
Cryptography is the only known practical means for protecting information 
transmitted through public communication net works. It is a subject of common 
interest to both mathematician and computer scientists. Number theory has 
application to Crypography. In 1977, R. Rivest, A. Shamir, and L. Adleman 
proposed a public key cryptosystem which uses only elementary ideas from 
number theory. Their system is popularly known as RSA after the initials of the 
inventors. Its security depends on the assumption that the factorization of 
composite numbers with large prime factors is time taking even in the computer. 
In this system each user chooses a pair of distinct primes, p and q, so large that 
the factorization of their product n = pq, is beyond all computational capabilities. 
After selecting n, the user chooses a random positive integer k, and the pair (n, 
k) is publicly known. Because the factors p and q are not known easily it is not 
possible for out siders party to decipher the message thus the security is 
maintained. Also it is not possible to say whether a given large number n is a 
prime or composite. It has to go through different primality tests. If n is not 
prime but composite there are methods due to Fermat and others to find factors 
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of the large number n. There are other different methods for the primality testin fe 
It is interesting to study these methods. 

Another application of congruential arithmetic is a public-key encryption 
method in which message represented by integers are raised to a given power 
and only the residues modulo a preselected encryption modulus is transmitted 
from sender to receiver. 

For example if the message is 7, the encryption key is 3 and the modulus 
is 10, then the transmitted message would not be 7° = 343, but only the digit : 
3. Chapter 5 and chapter 8 are devoted to the topic cryptography and primality 
and factoring, which contains the application of Number theory to cryptography. 


ooe 


PRIME NUMBERS AND 
DISTRIBUTION OF PRIME NUMBER 


1.1. PRIME NUMBERS. 


Phe numbers ls 2. 'S502 2 6s) are called positive integers. Among the 
positive integers there is as subclass of peculiar importance, the class of primes. 
A number p is said to be prime if 


@) p>l 
(ii) p has no positive divisor except 1 and p. 


NOTE An integer a is said to be divisible by another integer b, not 0, if 
there is a third integer c such that 


a=be. 
In this case b is said to be a positive proper divisor of a. 
A number greater than 1 but not prime is called as composite . 


Example: 2,3. 5,7, 11, 13, 17, 19, 23, 29, 31, 37, 41, 47 are the primes 
less than 50. 


Now the question is how to find out the primes. The process is known as 
primality test . The first elementary test is sieve method 


SIEVE OF ERATOSTHENES : In order to find prime number between 
1 and 100 we proceed as follows: 


STEP 1 : Write the numbers 1 to 100 in tabular form from 1 to 6 in 
column 1, 7 to 12 in column 2 and so on then proceed step by step 


STEP 2 : Consider the second row starting with 2 strike out all multiples 
of 2 in the table and round 2. 
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STEP 3 : Consider third row starting with 3 and strike out all multiples of 
3 from the table and round 3. 


STEP 4: Take 5!" row starting with S. Strike out all multiples of 5 from 
the rest of numbers in the table excepts 5. Round 5. 


STEP 5: Round the numbers left out in the table after following step 2 to 
step 4. 


These are the numbers which are prime numbers between 1 and 100. 1 is 
not considered as a prime number though it is divisible by 1 and so there are 25 
primes between | to 100. If you are asked to find out primes between 100 to 
200 the same procedure is repeated Here one has to consider the multiples of 7, 
11 and so on. This process is most elementary and can not be tried with a very 
big number with 10 million digits. 


The following BASIC programme computes all the prime numbers upto 
1000 using the sieve of Erastothenes. 


100 REM SIEVE OF ERATOSTHENES 
110 DIM N [1000], P[200] 

120 FOR 1=2TO 1000 

130 LET N [I] =0 

140 NEXT I 

150 LET K=0 

160 FOR P =2 TO 1000 

170 IF N[P] <0 THEN 240 

180 LETK=K+1 

190 LET P[K] =P 

200 IF P > SQR (1000) THEN 240 
210 FOR I=P TO 1000 STEP P 

220 LET N[I] =-1 

230 NEXT I 

240 NEXT P 

250 REM PRINT PRIME NUMBERS 
260 TETC=1 

270 FORI=1T1TPK 

280 PRINT P{I]; 


290 LET C=C+l 
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IF C<=7 THEN 330 


300 

310 

320 

330 

340 

2 3 
29 31 
67 71 
107 109 
157 163 
1997 271 
2951), 1, 203 
311 313 
367 |) 373 
421 431 
467 479 
541 547 
599s 601 
647 = 653 
709-719 
FED: \FF3 
29) 77889 
887 907 
967. 971 


THEOREM 1: Every positive integer except 1, is a product of primes. 


PROOF : Either n is a prime, when there is nothing to prove; or n has 
divisors between 1 and n. If n is composite then there exists an integer d satis- 
fying d|n and 1<d <n. Among all such integers d choose p; to be the smallest. 
Then p; must be a prime number otherwise it would have a divisor q with 1 < 
q <p, but then q | py, and p; |n imply q|n which contradicts the choice of p; 


977 


PRINT 
LETC=1 
NEXT I 
END 
RUN 
7 11 
41 43 
79 83 
127 131 
173 179 
224) iae9 
271 277 
Sal) 337 
383-389 
439 443 
491 499 
563 569 
613. 617 
661 673 
73339 
797 809 
857 859 
919 yigi829. 
983991 


as the smallest divisor not equal to 1. 


997 


19 


59 
101 


149 
193 
241 
295 
353 
409 
461 
521 
587 
641 
691 
757 
823 
881 
947 


23 


61 
103 


151 
197 
251 
307 
359 
419 
463 
523 
593 
643 
701 
761 
827 
883 
953 
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We write n =p nj, where p is a prime and 1 <n, <n. If n; is prime we are 
done. Otherwise the process is repeated to find another prime pz such that 
Ny = Paty, that is 

N= pyP2ng l< nj <n). 

Repeating the argument we have now 


(1) N= PjP2P3 ----Pk- 


1.2. GREATEST COMMON DIVISOR : 


If d divides two integers a and b, then d is called a common divisor of a 
and b. 


THEOREM 2: Given any two integers a and b, there is a common 
divisor d of a and b of the form 
(2) d=ax+by 


where x and y are integers. Moreover, every common divisor of a and b 
divides this d. 


PROOF : First we assume that a > 0 and b 2 0. 


We use induction on n; where n=a + b. If n =0 then a= b =0 and we take 
d=0 with x = y = 0. Assume the theorem is true for 0, 1, 2,....n—1. To prove 
it for n, assume a = b. If b =O take d =a, x = 1, y=0. If b 2 1 apply the theorem 
to a—band b, Since (a—b) +b= a =n—b < n—1, by induction hypothesis 
there is a common divisor d of (a—b) and b of the form d = (a—b)x + by. This 
dalso divides a—b + b =a so d is acommon divisor of a and b, and we have d 
= ax +(y —x)b, a linear combination of a and b. Since a common divisor 
divides a and b and hence by linearity it divides d. Hence proved. 


If a<0 orb <0 (or both), we can apply the result to |a| and |b]. Then there 
is a common divisor d of |a| and |b| of the form 


d= |alx+|bly 


If a <0, Jal x =—a x =a (-x). Similarly b <0, |b] y = b (-y). Hence d is 
again a linear combination of a and b. 


Definition : (Greatest common divisor) 


Given integers a and b, there is one and only one number d with the fol- 
lowing properties : 
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(a) d20 
(b) dia anddlb 
(c) e | a and e | bimplies eld. 


Then d is called as the greatest common divisor (gcd ) of a and b and is 
denoted by (a,b). ged (10, 34) = 2. If d = (a,b) = 1 then a and b are said to be 
relatively prime. 

By theorem 2, there exists integers x and y such that 1 = ax + by. 

Corollary 1 : If gcd (a, b) =d, then ged (a/d, b/d) = 1. 

PROOF : Since gcd (a, b) = d it is possible to find integers x and y such 
that d= ax + by. Dividing each side of this equation by d, we get the expres- 
sion 

1 = (a/d) x + (b/d) y. 

Because a/d and b/d are integers then (a/d, b/d) = 1, i.e. a/d and b/d are 
relatively prime. 

Corollary 2: If a|candb|c, with ged (a, b) = 1, then ab | c. 

PROOF : As a|c andb|c we can find integers r ands such that c = ar= 
b s. Now ged (a,b) = 1 allows us to write 1 = ax + by for some integers x and 
y. Multiplying by c we get 

c=c.1 =c (ax + by) = acx + bey. 
Substituting values of c on the right hand side, we get 
c =a (bs) x + b (ar) y =ab (sx + ry) 
which implies that ab | c. 


THEOREM 3 : (Euclid’s lemma) If a | be and if (a,b) = 1, the a|c. 

PROOF : Since (a,b) = 1, we can write by theorem 2, 1 = ax + by. There- 
fore c = acx + bey. Buta|acxanda|bcy, so ajacx+bcy=c. Hence 
proved. 


Remark: gcd (a,b) = 1 is a necessary condition for theorem 3. For Ex- 
ample 15 | 6.10 but 15 + 6 and 15 + 10. 

THEOREM 4 : If p is a prime and pl ab then pla or pl b. 

PROOF : If pl a then we need not go further. So let us assume that p Ja. 
Since the only positive divisors of p are 1 and p itself, this implies that gcd (p,a) 
= 1. But gcd (p,a) = p or ged (p,a) = 1 according as p|a or p | a.Since p| ab and 
p | a by Euclid lemma we get p | b. 


an 
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Corollary 3. If p is a prime and DylPaqias ees a, then pl a, for some k, 
where | <k <n. 


PROOF : We proceed by induction on n, the number of factors. When n 
= I, conclusion is trivial. When n = 2 the result is theorem 4. Assume n >2 and 
that whenever p divides a product less than n factors, then it divides at least one 
of its factors. Now let p | aa9.....ay_y. According to theorem 1 pla, or pl aj, ag 

- ay 1. If p 1a, then we are done. For the case pl ajay .... a,_; by induction 
hypothesis p | a, for k with 1 <k <n—1. Hence P divides one of the integers a), 
a2... ay, 


Corollary 4. If p, qj, qo ...... Gn are all primes and p | qi, qo .......... dn 
then p | qy for some k, where 1 <k <n, 


PROOF : By corollary 1, we know that p | qx for some k, with 1 <k <n. 
Being a prime , q, is not divisible by any positive integer other than 1 or qk 
itself. Since p > 1, we conclude that P= 4k. 


THEOREM 5: (Fundamental Theorem of Arithmetic) 


The representation of every integer n> 1 asa product of primes in (1) is 
unique apart from the order in which the factors occur. 


PROOF : Let us suppose that the integer n can be represented as a prod- 
uct of primes in two ways say 


T= P1P2P3 ----Pr- = 41923 «.--ss 
where the p; and q; are all primes, written in increasing magnitude so that 
PiSP2<..--SPp qi $qoS..... Sg. 


Since p; | qiqo .... qs then py = qx for some k, but then p; = qj. Similar 
reasoning gives q, > py, whence P) = q1. We may cancel this common factor 
and obtain 


P2P3 ----Pr- = 4243 ----ds. 
Continuing we get if r<s 
T= dr+t Graz «+ Qs 
which is absurd, since each q; > 1 hence r = s and 
P1 = Qi» P2 = Q2 «..-..- Pr = Gr 
giving the uniqueness of the two representations of n. 
Any positive integer n > 1 has canonical form 


05 [Ce 


n= Py PS? Py 
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Tr 
(3) or n= WW pei, where py <p S.....< pra’ 820. 
Hi 


This is called as the standard form of n. 


T 
THEOREM 6: If n= Be p;*, the set of positive divisors of n is the set 
je 


ae 
of numbers of the form ae pi , where O<c; <aj, for i=1,2,... 1 
iz 


PROOF : For 0 <c; <a; pi divides p;*. 
& r 
So - pi* divides [J p;*. 
is i=l 
‘THEOREM 7: If two positive integers a and b have the factorization 


2 ie} a 
a= II p*,b=TI1 pei, then their ged has the factorization 


wherec; =min {aj, b; }, 


ao 
PROOF: Let d= II p;® . Since cj $a; and c, <b; we have d divides a 
i=l 


and d divides b so dis acommon divisor of a and b. Let e be acommon divisor 
aandb, and writee 


3) 
e= II p,. Then e; S a; and ej S bj, soe; Sci 
Hence e|d. Sod is the ged of a and b. 


Euclidean Algorithm 

We describe the Euclidean Algorithm as follows : Let a and b be two 
integers whose greatest common divisor is desired. Since gcd (|a|,|b|)=ged 
(a,b) there is no harm in assuming that a2b>0. By division algorithm we find 
integers q, and.r, such that 


a=qy b+r, O<r, <b. 
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If it happens that r; = 0 then b |a and gcd (a,b) = b when r; #0, divide b 
by rj to produce integers qo and rz satisfying 


b=qry+tm, Osn<ry. 
If r2 = 0, then we stop; otherwise, proceeding as before we obtain 
T) =4312 +13 0<13 <1. 


This division process continues until some zero remainder appears, say at 
the (n+1) the stage where r,_; is divided by r,. 


We get a decreasing sequence b>r, >) >....... 2 0 satisfying the 
following system of equation : 
a=q)b+r, O<r,<b 
b=q2r +1, O0<nm<r 
Ty = 43%) +13, 0<n3<Km 
Th =n Tn-1 +f, O<th2<t1 
Th-1 = n+1 ™n + 0 O<tqy <r. 


Now r, = ged (a,b). 
Since if d = ged (a,b) thend|aand d|b imply that d | (a-qib) or dlr; by 
the relation a = qb + r;. Thus d is a common divisor of both b and ry. if cis a 
common divisor of b and r; then c| qb + r; =a. Soc is acommon divisor of 
both a and b . Hence c <d. It now follows from the definition of ged (b, r)) that 
d=ged (a,b) ged (b; 1) =ged (ry, 12) =.....= ged (T),0) =rp. hence ry is the 
greatest common divisor of integers a and b. We can express r, as a linear 
combination of a and b, 
Example 1. Find ged (1998, 2000). 
2000 = 1998x1+2 
1998 =2x 999 +0 
Hence gcd (1998, 2000) = 2. 
We express 2 as a linear combination of 1998 and 2000. 
2 =2000 x 1 + 1998 (-1). 
Example 2. Find ged (143, 227). 
227 = 143 x 1+ 84 
143 = 84x 1+59 
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84 =59x1+25 
59) =25x%24+9 
25 =9x2+7 
9 = 7x 142 
TS DKi3 +1 
220x240 


Hence ged (143, 227) = 1. 
We express 1 as a linear combination of 143 and 227. 
1=7-6 
ef ede Ki) 
=7-3(9-7) 
=4x7-3x9 
=4x(25-9x2)-3x9 
=4x25-11x9 
=4x 25-11 (59-25 x 2) 
= 26x 25-11x 59 
= 26 x (84 -59)-11 x 59 
= 26 x 84-37x 59 
= 26 x 84 - 37 x (143 - 84) 
= 63 x 84-37 x 143 
= 63 x (227- 143) — 37 x 143 
= (6 x 3) 227 — (100) 143. 
The ged of 76084 and 63020 is 92. 


The following BASIC program uses Euclid’s algorithm to compute the 
gcd of given pair of numbers. 


100 
120 
130 
140 
150 
160 
170 
180 


REM FIND THE GCD OF TWO NUMBERS 
PRINT” A”,” B”,?GCD” 

PRINT 

READ A,B 

PRINT A,B 

LET Q = INT (A/B) 

LETR=A-Q*B 

LETA=B 
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190 LETB=R 

200 IFR>0THEN 160 

210 PRINTA 

220 GPTP 140 

230 ~— DATA 60, 5280, 49, 139, 3850, 5280 
240 DATA 1124, 1472, 17296, 18416 
250 DATA 76084, 63020, 7854, 13398 
260 END 


RUN 
A B GCD : 60 5280 60, 49 139 Ve 
3850 5280 110, 1124 1472 4, 17296 18416 16 
76084 63020 92,7854 13398 462. 
OUT OF DATA IN LINE 140. 


13. HOW MANY PRIME NUMBERS ARE THERE ? 


THEOREM 8 : If n is a natural number > 2 then between n and n! there 
is at least one prime number. 


PROOF: As n>2, the integer N=n!—-1is> 1 and, it hasa prime divisor 
p, which is obviously < N and so < n !. Now we can not have p < n, because 
then p would be a divisor of the number n!, and being also a divisor of the 
number N, it would be a divisor of the differences of these numbers, i.e. the 
numbers n! — N = 1 which is impossible. Therefore p > n and as we know, p < 
n! we have n < p <n! and the theorem is proved . 


In connection of the above theorem we observe that in 1850 Chebyshev 
proved a stronger theorem called as Bertrand postulate: 


Between n and 2n there exists at least one prime p. That is n < p < 2n. 


Therefore, for every natural number there exists a prime number greater 
than that number, whence it follows that there are infinite number of primes 
which was known to Euclid. 


THEOREM 9 : (Euclid) There are infinite number of primes. 


PROOF: Suppose that there are only a finite number, say p; po... Pn - 
Let N = 1 + pip. . - pp- Now N> 1, so either N is prime or N is a product of 
primes. N is not prime since it exceeds each p; . Moreover no p; divides N. 
Because if p; divides N, then p; divides the difference N — pjp2.... pya= 1. 
This is a contradiction, This proves the theorem . 
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Second proof of Euclid’s theorem: Suppose that 2, 3 ---pj are the first j 
primes and let N(x) be the number of n not exceeding x which are not 
divisible by any prime p > pj. If we express such an n in the form 

n= nj2m Fj 

where m is ‘quadrifrei’ i.e. is not divisible by the square of any prime, we 

have 
Le eae tl 

with every b either 0 or 1. There are just 2j possible choices of the expo- 

nents and so not more than 2) different values of m. Again nj < vn <x and 


so there are not more than +/x different values of n 1 - Hence 


(4) N(x) <2) vx.. 
If the theorem is false, so that the number of primes is finite, let the primes 


be 2,3. . . .pj. In the case N (x) = x for every x and so x <2) Vx implies x < 
27 which is false for x > 22) + 1. 


i2) 
THEOREM 10: The infinite series © 1/p, is divergent . 
n=! 


PROOF : We will use the above arguement for the proof of this theorem. 
If the series is convergent, we can choose j, so that the remainder after j terms 
is less than % i.e. 


1 1 1 
+ =------ <= L Ai 
(5) Pat Pjs2 2 The number n <x which are divisible 
by p are atmost x / p . Hence x—N (x), the number of n < x divisible by one or 
More pj+1, Pj+2--- is not more than 
1 1 1 

+ =------<—x 
Pjsr  Pj+2 : 


Hence by (4) 
Yax <N (x) < 2ivx 
ie. 
x < 22+? | which is false for x > 22i+2 , 
Hence the series diverges. 


THEOREM 11 : There are infinitely many primes of the form 4n-1. 
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PROOF ; Define N by N=27.3.5 ... p— 1. Then N is of the form 4n-1 
and is not divisible by any of the primes upto p. It can not be a product of 
primes of the form 4n+1 only, since the product of two numbers of this form is 
of the same form; and therefore it is divisible by a prime 4n-1 greater than p. 
Hence there are infinitely many primes of the from 4n-1, 


THEOREM 12: There are infinitely many primes of the form 4n+3, 


PROOF Define N by N=2?,3.5...p-1 Then N is of the form 4n+3, and is 
not divisible by any of the primes upto p. Itcan not be a product of primes 4n+1 
only, since the product of two numbers of this form is of the form 4n+1; and 
therefore it is divisible by a prime 4n+3, greater than p . Hence there are infi- 
nitely many primes of the form 4n+3. 


THEOREM 13: There are infinitely many primes of the form 6n +5. 
PROOF : The proof is similar. Define N as N =2..3 5... pel. 


We observe that any prime numbers, except 2 or 3, is 6n—-1 or 6n + 5 and 
the product of two numbers of the form 6n+1 is the of the same form. Hence 
prime divisors of N are of the form 6n + 5 greater than p. Hence there are 
infinitely many primes of the form 6n+5. 


THEOREM 14: There are infinitely many primes of the form 8n + 5. 


PROOF: We take N = 32, 52,72... p? +27, asum of two squares which 
have no common factor . The Square of an odd number 2m+1 is 4m(m+1) +1 
and is 8n+1. So that N is 8n+5. By above theorem any prime factor of N is 
4n+1, and so 8n+1 or 8n + 5 and that the product of two numbers 8n + 1 is of 
the same form, we complete the proof as before. 

n-l 

THEOREM 15: If p, is the n' prime number, thenPn <2” 

PROOF : Let us proceed, by induction on n. For n = 1, it is trivial . 
Assume n> | and that the result holds for integers up to n. Then 

Pott =SPiP2--- Prt 1 


gn-l 


S227. PP 41a QNF2+.. + omtyg 


Soe 
But 22"-! 2 Ifor all n; whence 


1 A n 
Poti S at +2? 1S 2, pt 9? 
Hence proved. 


2 
Corollary : For n > 1, there are at least n+1 primes less than 2” 
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PROOF : From the theorem we know that p; , p2,-. Pn are all Jess than 
n 
ee 


There exist prime numbers having at least three thousand digits, but no 
such number is known. The greatest known prime number has 1332 digits itis 
the number 24423_1 which was verified to be prime in the year 1961. Most 
recently largest known prime is 26.972, 593 _ 1 having 2, 098, 960 digits found 
by Nayan Hajaratwala in June 1999. 


From Bertrands postulate it follows that for every natural number there 
exist at least three prime numbers each having s digits. Since each of the 
numbers 


10%! 2.105! , 4.10! and 8. 10°! 

have s digits, then for s>1 there exist prime numbers p, q and r such that 

10-1 < p<210%! <q< 4.10%! <r<8. 10°! ; 

it is clear that each of the numbers p, q,r has s digits. 

For s = 1, we have four primes of one digit 2,3,5 and 7. The number of two 
digits primes is twenty-one, of three digit primes is 143. Thus there exist at 


least three prime numbers of a hundred digits each. R.M. Robinson has found 
three prime numbers of a hundred digits. 


81.2324 + 1, 63.2326 +1, 35.2927 +1. 


We do not know so far any prime number having a thousand digits, al- 
though we known there exist atleast three such numbers. Such prime numbers 
are called as Titanic primes. 


1.4. TWIN PRIMES : 


There arises a series of questions about the infinite sequence of consecu- 
tive prime numbers, i.e. the sequence 2, 3, 5, 7, 11, 13, 17, 19593) 2903: 
only some of there question can be answered casily. 


The smallest two prime numbers are 2 and 3. These are successive natural 
numbers. the question arises: if there are other successive natural number which 
are both prime; the answer is no. Because of two successive natural numbers 
one is even, and if it is >2 then it is composite. 

There are many pairs of successive odd numbers which are both primes, 
for example 3 and 5, 5 and 7, 11 and 13, 17 and 19, 29 and 31 , 41 and 43. We 
call such pairs twin primes. There are 152, 892 such pairs of numbers less than 
30 million. 


ofl 


‘Tee “Sowing BASIC program computes and prints all twin primes less 
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Gem 9000. 
100 REM TWIN PRIMES LESS THAN 1000 
120 DIM A [1000], B [400] 
120 FOR X=2TO 1000 
130 LET A [X]=0 
140 NEXT X 
150 LETC=0 
160 LET S = SQR (1000) 
170 FOR B =2 TO 1000 
180 IFA [B] <0 THEN 250 
190 LETC=C+1 
200 LET B[C] =B 
210 IF B>S THEN 250 
220 FOR X = B TO 1000 STEP B 
230 LET A [X]=-1 
240 NEXT X 
250 NEXTB : 
260 PRINT “TWIN PRIMES” . 
270 PRINT 
280 FOR X=2TOC 
290 IF B[X] -B[X-1] <> 2 THEN 310 
300 PRINT B[X-1]; B [X] 
310 NEXT X 
320 END 
RUN 
TWIN PRIMES 
3 5 
5 7 
11 13 
17 19 
29 31 
41 43 
59 61 
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101 103 
107 109 
137 139 
149 151 
179 181 
191 193 
197 g 199 
227 239 
269 271 
281 283 
311 313 
347 349 
419 421 
431 433 
461 463 
521 523 
569 571 
399 601 
617 619 
641 643 
659 661 
809 811 
821 823 
827 829 
857 859 


Long ago the question was asked whether the number of twin primes is 
infinite. We do not know the answer to this question. 


Twin prime conjecture : There are infinitely many prime pair p, p+2. 
The argument which makes it plausible that 


2C9Xx 


PO) ae 


where P2(x) is the number of these pairs with p <x and 


ee Mian xian cent 
bg eet ny (p—12 
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Itis an unanswered question whether there are infinitely many pair of twin 
primes that is, pairs of successive odd integers p and p +2 which are both 
primes. Electronic computers have discovered 152, 892 pairs of twin primes 
less than 30,000,000 and twenty pairs between 10'? and 10!? +10,000. The 
largest to date twin primes are 107570463.1072° + 1 each 2259 decimal digits 
long were discovered in 1985. 

The largest known pairs of twin primes are 1706595 x 211235 +1 and 
571305 x 27/0! +1 found in 1990 by B. Parady, J. Smith and S. Zarantonello. 
In 1998, Ray Ballinger found the largest twin primes 835335 x 259014 + 1 
having 11751 digits. 

For every x > 1 let 7t) (x) denote the number of primes p such that p+2 is 
also prime and p+2 <x. 

Brun announced in 1919 that there exists an effectively computable inte- 
ger Xo such that, if x 2 xq, then 702(x) < 100x /(log x). Further /(1/p + 1/(p+2)) 
converges which express scarcity of twin prime, even if there are infinitely 
many of them. 

B = (1/3 + 1/8) + (1/5 + 1/7) +.... +(i/p+ I/pt2)+....- 

is called Brun’s constant and the value of B is 1.90216054. 

Growth of 1 (x) 


x Tt (x) 
10° 35 

10* 205 

10° 1224 

10° 8169 

107 58980 
108 440312 
10° 3424506 
101° 27412679 


Record : The largest exact value for the number of twin primes below a 
given limit has been published by Brent in 1976. 
Ti (10!!) = 224,376,048. 
Now the question is: which digits can there be at the beginning and at the 
end of a prime number? 
The last digit of a prime number having more than one digit can not be 


even because then the number would be >2 and thus even and composite; the 
last digit can not be 5 because then the number would be greater than 5 and 
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divisible by 5 and so it would be composite. Thus the last digit of a prime 
number >10 can only be 1, 3, 7 and 9. 


There exists prime number having at the beginning and at the end an arbi- 
trary large number of digits equal to 1 ( but the middle digit may be other than 
1). 

In this connection the problem arises whether there exist infinitely prime 
numbers whose digits are all 1, for examplel 1! and 


14,111,111,111,111,111,111,111, = (10% - 1) 7/9. 


Such type of numbers are caled as Repunits. Repunits having 9 ones is 
prime. 


The proof that the last number is prime is not easy. However it is easy to 
prove that, if a number whose digits are all 1 is prime then the number of its 
digits must be prime. This property, however, is not sufficient because, for 
example, 


111=3x 37; 11,111=41 x 271; 1, 111, 111 =239 x 4649. 


Also the number (1037-1) /9 having thirty seven digits is composite and 
the number (10%! -1)/9 having 641 digits is composite and divisible by 1238. 


Prime numbers other than those formed by the same digits have been 
found which remain prime after every permutation of their digits, for example 
13,113. It is not known whether these numbers are finite. 


Also we do not know if there exist infinitely many prime numbers whose 
first and last digits are 1 and the remaining ones are 0, as for example the 
number 101. Itis easy to prove that such a prime number must be of the form 


10°" +1 where n is natural number, but again this property is not sufficient 


because 10* +1 = 73 x 137 we can not answer the question whether the 
sequence of sums of the digits of consecutive prime number tend to infinity. 


1.5. CONJECTURE OF GOLDBACH 


In 1742, Christian Goldbach stated conjecture that each even number >2 
is the sum of two primes This conjecture still remains neither proved nor dis- 
proved. A stronger conjecture has been made, namely that every even number > 
6 is the sum of two distinct prime numbers and this is verified for numbers < 
100,000. 


» Itcan be proved that the last conjecture is equivalent to the statement that 
every natural number > 17 is the sum of three different primes for example 19 
= 3+45+11.A.Schinzel has proved that the conjecture of Goldbach implies that 
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every odd number > 17 is the sum of three different primes . Every even integer 
greater than 4 can be written as a sum of two odd prime numbers. 

Example : 10= 3+7=5+5 

22=3 +19=5+17=11+11 
30=7+23 =114+19 =13+17. 

THEOREM 16 : Every odd number > 7 is the sum of three odd primes. 

PROOF : From the conjecture of Goldbach this follows easily. If nis a 
natural number and 2n + 1 > 7 then 2n + 1 —3 =2 (n-1) > 4. The even number 
2 (n-1) > 4 is, by the conjecture of Goldbach, the sum of two prime pand q, 
which can not be even, because our number is > 4. The prime numbers pandq 
are therefore odd and the number 2n +1 = 3 + p + q is the sum of three odd 
primes, 

We do not know whether every odd number >7 is the sum of three odd 
primes, but in 1937, I. Vinogradov proved that every sufficiently large odd 
number is the sum of three odd primes. We know a number a = 33 which is 
the sum of three odd primes. 

THEOREM 17 (Euler) : 

The following two statements are equivalent. 

(A) Every integer n> 5 is the sum of three primes. 

(B) Every even integers 2n > 4 is the sum of two primes. 

PROOF : Assume that (B) holds and if 2n > 6, then 2n—2 = p + p’ so 2n 
=2+p+p’, where p, p’ are primes. Also 2n + 1= 3 + p +p’ which proves (A). 

Conversely, if (A) is assumed to be true and if 2n > 4, then 2n +2 = ptp’ 
+p” with p, p’, p” primes, then necessarily p” = 2 (say) and 2n = p + p’. 

Note that it is trivial that (B) is true for infinitely many even integers 

2p = p + p (for every prime). 

Further it has been proved that every natural number >11 is the sum of 
two or more different primes. For example 12 =5 +7, 13=2+11,17=24+3 
+5+7,29=3+7+19.A Makowski has proved that every natural number > 
55 is the sum of different primes of the form 4k + 3. 

THEOREM 18 : Every odd (positive or negative) integer can be written 
in an infinite number of ways in the form p+q —r where p, q and rare odd 
primes. r 

PROOF ; For every integer k there exists an odd prime number r such 
that 2k = 1+r>4, (Itis enough to take for ra sufficiently large prime number). 
But then 2k = 1 +ris an even number > 4, therefore, by Goldbach’s conjecture 
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2k — 1+ r=p+q, where p and q are odd prime numbers. Hence 2k — | = p + 
q-r in which the prime number r may be arbitrarily large. Hence proved. 

THEOREM 19 : Every natural number >11 is the sum of two composite 
numbers. 

PROOF : If n> 11 is an even number, then n — 4 is an even number >2, 
i.e. the sum of two composite numbers. But if n> 11 is odd then n — 9 is an 
even number >2, i.e. it is composite and n = (n — 9) + 9, i.e. the sum of two 
composite number 

Remark : From the above theorem we should not conclude that the inquiry 
into composite numbers is easier than investigations about prime numbers, for 
it is still unanswerable whether or not among numbers F, = 22" 41,n=1,2, 
3... we have infinitely many composite numbers. We only know thirty eight 
such composite number of which the greater is Fyo45. 

G.H. Hardy and J. E. Littlewood conjectured that every sufficiently large 
natural number which is not a perfect square is the sum of a square of an integer 
and a prime number. 

THEOREM 20: There exist infinitely many squares of natural numbers 
which are , as also those which are not the sum of a prime number and the 
square of an integer. 


PROOF : If p is an odd prime, then (p + 1) /2 is a natural number and we 


have 
+1 ts p-l e 
lerwlacp hes 
On the other hand if n = 3 k+2, where k is a natural number, then for 
some integer x and a prime number p we can not have, 
n2=x* +p, 
for then n would be .x and 


2_ x2 =(n+x)(n-x) 


p=n 
whence, considering that p is prime, n— x = 1 andn+x = p,so that 
p= 2n-1=3(2k+1) 
which is not possible for a natural number k. 


1.6. FERMAT NUMBERS. 


A 3 
Fermat numbers are numbers of the form F, = 2° +1, where n =0, 1, 2. 
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A famous mathematician of the seventeenth century, P. Fermat conjec- 
tured that all these numbers are prime. This is true for n = 0, 1, 2, 3, 4. But L. 
Euler in 1732 showed that the number, 


5 
F5= 27° +1 =4,294,967, 297 
having 10 digits is composite and divisible by 641. We know 38 compos- 
ite numbers Fn, namely for n=5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 18, 19, 
23, 36, 38, 39, 55, 58, 63, 73, 77, 81, 117, 125, 144, 150, 207, 226, 228, 260, 
267, 268, 284, 316, 452, 1945. 


These 38 composite numbers F, include those for which we know the 
prime factors (for example Fs and F¢) those whose prime factor we do not 
know, The number of digits of the composite Fermat number F945 is >10 582 


(1) The largest know Fermat prime is Fy=65537 


(2) The largest known composite Fermat number is F7347; (Keller 1984, 
Amonwin 1985) which has a factor 5 x 223473 +1 and more than 
107000 digits. Keller has also shown that Fo44g is composite having 
the factor 19 x 29479 41, 
Fio = 455925777 x 6487031809 x Cy9; where C,, denotes a composite 
number with m digits. 


To find the prime divisor of Fn we know the following: Every natural 
divisor of the number F, must be of the form 2 2n+2 k+1, where k is an integer 
= 0. This can be verified by the following examples. 


Example 1 : If n = 1945, the divisors of Fjo45 can only be in the arith- 
metic progression 21947 k 41 (k =0, 1, 2..). For k = 0 we obtain the trivial 
divisor 1. For k = 1, the number 2"*? +1 = 2!947 41 is obviously divisible by 
3 and so is not a prime. For k = 2, the number nt? 2.41 =21948 41 = (248 
+1 is divisible by 2+ + 1 and so is not prime. For k = 3, the number 2"*?, 3 + I= 
2!947 3 41 is composite, divisible by 5 because 5 | 2*-1 when 5 | 2!944—-1 and 
if we multiply the right side by 27.3, 5.2!947.3 — 24, whence 5 | 2'947.3 +1. For 
k =4, the number 2", 4 + 1 =2!949 + 1 is divisible by 3 and so is composite. 


Thus trying to find the prime divisor of the number Fj945, we must divide 
it by 219475 4 1 = m. As the division turns out to be without remainder, it 
follows that m is the smallest divisor of F,945 is a prime. 


Example 2 : The divisor of Fs is 2" -k+1 that is 128k +1. Fork =1,we 
get 129 which is composite. For k = 2 we get 257 which is a prime but does not 
divide F; = 4,294,467,297. For k = 3 we get 385 which is composite. For k = 4 
we get 513 = 2° + 1 is divisible by 3 hence composite. For k = 5 we get the 
prime number 641 which divides Fs. Dividing F; by 641 we get the quotient 
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6,700,417 which is also a prime. If Fs is composite it must have a prime divisor 
not greater than its square root and so less than 2600. So we have 128k + 1 < 
2600 whence k < 21. For Fe the prime divisor is 28 1071 + 1. Thus Fe is 
composite. 

THEOREM 21 : If a>2 anda" + / is prime, then a is even and n = 2™, 


PROOF: For if ais odd then a” + / is even and if n has an odd factor k and 
n=ki, then a" + / is divisible by a! + J and 


kl 
a“ +1 = i 

i =a DI _ gtk 2)t a 
a’ +l 


Hence n = 2™. Hence proved. 


THEOREM 22: IfF, is prime, the number 32°" +1 is divisible by Fy. 
For the proof of this theorem we require the following lemma. 


LEMMA : If k is a nonnegative integer and the number p = 12k + 5 is 
prime, then the number 30k#2 4.1 is divisible by p. 


PROOF : The lemma is true for the number k = 0; we may therefore say 
that k is a natural number. Let p = 12k +5. We consider the product of the first 
6k + 2 natural numbers divisible by 3 and divide the factors of the product of 
three groups, putting in the first group the first 2k factors, in the second next 2k 
+ 1 factors and ir the third the remaining 2k + 1 factors. 


First group gives the product 3. 6. 9...6k. 


The second group gives the product (12k + 3) 12k (12k-3)... (6k + 6) (6k 
+3) 


(Changing the order of factors) which , since p = 12k + 5, can be written in 
the form 


(p-2) (p-5) (p-8) .... [ p— (6k + 2) J. 


Because the number of divisors is odd i.e. 2k + 1, our product, after ex- 
panding and collecting the terms divisible by p, gives us the number p u — 
2.5.8. (6k +2), where u is a certain integer. 


The factors of third group give the product 
(12k + 6) (12k+9) (12k + 12) ... (18k +6) 
= (p+1) (p+4) (p+7) ... (pt6k +1) 
=pv+14.7.....(6k +1) 

where v is a natural number. 
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We have now 
3.6.9... (18k + 6) 
= 3.6.9.... 6k (p u-2.5.8... (6k + 2) (pv + 1.4.7. (6k+1)) 
=p w-1.2.3.4.5.6.... (6k+1) (6k +2) 
=p w-(6k+2)! 
where w is an integer. 
But 3.6.9... (18k+6) = (6k+ 2)! 30K+2 
ie. (6k +2)!3°*#2 =p w—(6k+2)! 
i.e. the number p w is divisible by (6k+2)!, and so 
p w= (6k +2)! t, 
where t is an integer. But 6k+2 < 12k+5 = p, and so the number (6k+2)! is 
not divisible by p. As the product (6k-+2)! t is divisible by p, t must be divisible 


by p, t=ps, where w= (6k+2)! s, where s is an integer. Hence 3° k+2 = ps—1 
when it follows that the number 3°*+? +1 is divisible by p. Hence proved. 


> 


PROOF OF THE THEOREM 22 : Let n be a-given natural number, We 
have 2" = 2m where m is a natural number. Hence F,-1 = 4™ from which it 
follows that the number F,—S is divisible by 4. We have F,-1=4 ™ = (3+1) ™= 
3 t+ 1, where t is a natural number. Hence F,-5 =3 (t — 1) which proves that 
F,-5 is divisible by 3, and since as we have shown it is divisible by 4, it is 
divisible by 12. So F, = 12 k + 5, where k is an integer. From the lemma it 


follows that if F, is prime then 3 ©*+? 41 = 3(""-)/2 41= 2". sis divisible 
by F,. Hence proved. 


Example : F7 is composite. 


127 
To prove this it is enough to show that 32 +1 is not divisible by 
F7 = 340, 282, 366, 920, 938, 463, 374, 607, 431, 768, 211, 457. To find 
127 
this we have to find the remainder of the division of 3” by F7 .The number 


32! has 61 digits and calculate the remainder r of its divisor by F>. The remain- 


8 
der r; of the divisor r2 by F; will be the division of 3° by F;. Similarly the 
remainder ry of the division of rj? by F, will be the remainder of division of 


8 
Be by F;. Proceeding we arrive at the remainder 119 of the division of the 


127 x 7 A 
3?“ by Fy. In this way it is found that rj399 # 22° , whence it follows that the 
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eT lg ee ‘ : 
number 3~ + 1 isnot divisible by F7 . So by the theorem 22, F7 is composite. 
For the number Fj, the smaller prime divisor is 2!8. 3150 +1 was found in 
1953, and conjectured that all number of the sequence . 


241, 2741,27 41, 2% +1)... 


are prime was disproved. We do not know, if in this sequence there are 
infinitely many prime numbers or infinitely many composite numbers. 


1.7. PRIME NUMBERS OF THE FORM n"+1,n"" +1 etc. 


Like Fermat numbers discussed in’é 1.6. the question arises how many 
prime numbers are there of the form n® + 1, where n is a natural number and 
it must be 


20 6 5 
= Fo> oF > gio > 128 


So among the numbers n” + 1, there are only three primes: 
1§4122,2741=5,.4441=257. 


Consider the number of the form n®" +1. 


1 2 ‘ 
We have 1! =2, 2” 4+1=17. As above we can prove that if the number 
n®” +1, where nis a natural number >1, is a prime, then for same integer r2 0, 


r 
we must have n= 2 , so that 


n? r 
n+ lego r+? 
For r=0, since F) = 17, for r= 1 the number Fo is composite . For'r = 2, 
Feo is composite. Hence we have 


Among the numbers having not more then 10!8 digits, there exist only 


n 
two prime numbers of the form n” +1, where nis a natural number 2 and 17. 
Now the question arises: 
Among the numbers, 


2 
EAN) 2 22 3, 27 4 3) cela how many primes exist. 
The answer is that there are only a finite number of primes in the set (A). 


Suppose that n” + 1 is prime for natural number n. Each natural number n 
is of the form n= 2 *: m, where k is an integer 20, and m is an odd number. 
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k \7 k 
If m1, then the number n® +1 = Gi } +1 would be > n? +1 and is 


divisible by as +1, giving n" +1 to be composite. Therefore, m must be 
equal to 1. So n=2K. 


If k =0, then n=1, and the number n"+ 1 isa prime. If k>0, thenk = 
2's, ris an integer 20 and s is an odd number. 


Ifs >1, thenn™+1=275"4 = is divisible by [z)+ hence 


composite. Therefore, s = 1 and k = 2' and n = 2! and 


Root r+2" 
nl = Der Oe Apap ie 


Hence, n” +1 is prime if F,,9 r is prime. 

For r= 0, since F; = 5 is prime we get 2? +1 =5 is prime. For r= 1, since 
F3 = 257 is prime we get the prime number 44+1 = 257. For r = 2 » Fe is 
composite divisible by 28. 1071+1. We do not get nso that n" +1 is prime. For 
t= 3 since Fj; is composite n" +1 is also composite. If, therefore besides the 
number 2, 5 and 257 there exist prime numbers of the form n® + Ly 


20 6 5 
then they must be > Fy > 2° > 210° 5 oslo 4 


2 
2 2 
THEOREM 23: Among the numbers 22 + OL as DSieiete there are no 
primes, because each of these numbers is divisible by 7. 


PROOF: For a natural number k, the number 22k = (3+1)* where divided 
by 3 gives the remainder 1, so 2? = 3t +1, where t is a natural number. 


2k 
Hence 27 +5 =23'! 45 = (741) 245 which is divisible by 7. 


THEOREM 24: For Fermat numbers F, and Fm, where m>n > 0, ged 
(FmsFn) =1 


PROOF: Put d= gcd (Fy, Fy). Since Fermat numbers are odd integers, 
d must be odd . If 


n 
we setx = 2? andk=2™ then 


on Qa Kee 
Fm-2_ (2 ) ie. peek e= 2 
Fn gn X+1 
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where F, | (Fy-2). From d | F,, it follows that d | Rn-2). But d | F, 
implies d | 2. 


m 
But d is an odd integer and so d = 1. This proves the theorem . 


n 
THEOREM 25: For F,= 2” +1 we have F,| 2°"-2(n=1, 2,3,.. ) 
PROOF : By induction we can show that 2" > n+1 which implies that 


n n+l oh 
antlig? and 22) 22" _4 
Therefore 
n +1 an a 
Fy= 2? +122" -112? — 119?” +2_2 
=2Fn_2 and F, |2Fa_2 
Hence proved. 


1.8. MERSENNE NUMBERS 


Mersenne numbers are numbers of the form M, = 2"-1, where n = 1, 2, 
3,.. These numbers are interesting in two respects. Firstly the greatest known 
prime numbers are Mersenne numbers and secondly it gives rise to perfect 
number, that is those which are equal to the sum of their natural divisors less 
than those numbers themselves. 


Since 14+2+2? +....2"-1= 2" _1. ie. the Mersenne number is the sum of 
the first n terms of the G.P. 


The following is the BASIC program for finding Mersenne number 


100 REM MERSENNE PRIMES 

110 PRINT “PRIME” “MERSENNE” 
120 PRINT “NUMBER”, “PRIMES” 
130 PRINT 

140 FOR K=1T08 

150 READ P 

160 LET M = 21P-1 

170 PRINT RM 

180 NEXT K 

190 DATA 2,3,5,7,13,17,19 


200 END 
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RUN 
PRIME MERSENNE 
NUMBER PRIMES 
2 3 
3 7 
5 31 
7 127 
13 8191 
17 131071 
19 524287 


THEOREM 26 : If nis composite then the number in M , is composite 


PROOF: If n=ab where aand b are natural numbers > 1, then 2°—1>1 
and 2"— 1 = 2#— 1 52-1, and the number 2*°-1 is divisible by 2*-1, and so 
is composite. Therefore if the number M,, , where n > 1, is prime, then the 
number n must be prime, but the converse is not necessarily true because, for 
example 


My, = 2!! -1 = 2047 = 23 x 89. 


If p is aprime number, then each natural divisor of the number M, must be 
of the form 2kp + 1, where k is an integer > 0. 


Many of the Mersenne numbers My , where p is a prime number, are 
composite. For example 47 | M23, 167| Mg3 263] Mi31, 359| M79 - 


Conjecture 1. Among the numbers Mp, where p is a prime number, there 
exists infinitely many which are composite. 


M,, for n =2, 3, 5, 7, 13, 17, 19, 31, 61, 89, 107, 127, 521, 607, 1279, 
2203, 2281, 3217, 4253 and 4423 is prime. 


Conjecture 2. If the Mersenne number M, is a prime then the number 
Mmn is also prime. 


This is true for first four smallest Mersenne numbers, but for fifth Mersenne 
number Mj3 = 8191 it is not true because My = 28191 _1 is composite 
(Robinsen). The verification of this required one hundred hours work on an 
electronic computer. Again although Mj7 , Mio are prime My» and Mp» are 
composite. 

Let o (N) denotes the number of positive divisors of N. If o (N) = 2N then 
N is said to be a perfect number. Example N = 6, N = 28 are perfect numbers. 
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The following BASIC program computes the first two perfect numbers. 


10 FOR N =2 TO 100 
20 LETS =0 
30 FOR D = 1 TON/2 
40 IF INT (N/D) <> N/D THEN 60 
50 LETS =S+D 
60 NEXT D 
70 IFS S NTHEN 90 
80 PRINT N; “IS A PERFECT NUMBER” 
90 NEXT N ” 
99 END 
RUN 


6 ISA PERFECT NUMBER 
28 IS A PERFECT NUMBER. 
THEOREM 27: All even perfect numbers are of the form 2 ?-! M pie. 


-2P-! (2 P-1) if M, =2-1 isa prime number. 
P aA 


PROOF : Let N be a number such that N=2?-'M , =2P-! (26-1), 
To prove that N is a perfect number.: 
If o (N) denotes the sum of the divisors of N, then 
o(N) = 6 (291 (2P_-1)=6 (2?!) 0 (2P-1) 
=(2P-1) (2P-1 41) 
=2(2P-! (2 P1)) 
=2N. 
making N a perfect number. 
Conversely assume that N is an even perfect number. We may write N as 
N =2P-! m, where m is an odd integer. Then 
(7) o(N) =5 (2%! m)= 6 2!) o(m) 
=(2P-1) 6 (m) 
Since N is perfect 
(8) o(N)=2N=2Pm. 
Equating (7) and (8) 2? m = (2 P-1) c (m) 
which is simply to say that 2 P-1 | 2? m. 
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But 2P-1 and 2? are <elatively primes, whence 2? —1| m, say m=(2P-1) M 
Substituting in (8) we get. 
2P(2P-1)M = (2P-1) o(m) 
This implies o (m) = 2? M. Since mand M are both divisors of m (with M 
<m) we have 2P M=o (m)> m+M=2?M 


leading to 6 (m) = m+ M. The implication of this inequality is that m has 
only two divisors M and m itself. It must be that m is prime and M = 1, in other 
words m= (2 P-1) M =2P -1 is a prime number. 

THEOREM 28: If a*-1 is prime (a> 0, k > 2) then a = 2 and k is 
prime p. 


PROOF : Now ak-1 = (a1) (ak! 4ak? 4....-+a+1) 
als gets). parl Sarl ot 

Since aX-1 is prime, a-1 = 1 so that a =2. 

If k were composite, then take k= rs, with r>1 ands > 1. 

Thus ak—1 = (a")$ -1 = (a"- 1) (aS) 4a 24. +al +1) 

and each factor on the right is greater than 1. 

But this violates the primality of a‘—-1, so k must be prime. 

For p = 2, 3, 5, 7 the values 3, 7, 31, 127 of 2P-1 are primes so that 

2(22-1) =6 
27(23-1) = 28 
24(29-1) = 496 
26(27-1) = 8128. 

All are perfect numbers, are even and end in the digit 6 or 8. No odd 
perfect number exists. As only 38 Mersenne primes are known, only 38 even 
perfect numbers are known till to day. The 318' Mersenne prime is M> 6001. 
The largest known even perfect number, the 31' one is 

Py, = 2216090 (2216091 _1), 

a number of 130,100 digits. 


P32= 2756838(2756839_1) has 455663 digits. Most recently the 
38'h Mersenne prime was discovered by Nayan Hajratwala in June 1999. The 
number is 2°°/2593 _ 1, Just as for Fermat numbers, there are many open 
problems about Mersenne numbers 
(1) Are there infinitely many Mersenne primes? 


(2) Are there infinitely many composite Mersenne numbers? 
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n 
Fermat number is F, = 22 +1(n >0) and a triangular number is 
Tm=%m (m+). 
By a triangular number we mean the numbers, which are represented by 
vertices of a triangle. For example 1, 3, 6, 10, 15, 21, 28 are triangular num- 
_ bers. 
Exercise : Show that the only Fermat number which is also triangular 
number is 3. 
Solution : If F,, is triangular then 


"41 =%m (m4) 
=> 2" = %m (mtl)-1 


=> 2415 m(m41)-2=m? +m-2= (m-1) (m+2). 
Both (m + 2) and m —1 are power of 2 and the difference is 3, so m=2 is 
the only solution i.e. 3 is the only triangular number which is also a Fermat 
_ number. 

A number ais a triangular number it is necessary that 1+ 8a should be a 


perfect square . 
THEOREM 29 : No Fermat number other than 3 is a triangular number. 


PROOF : 22" +1 is a triangular number 
> 14+8(22" +1), ic. 94 72743 is a perfect square. 


Let 9+22"*3 = M2 and2"+3=t, then 2*=M?2-9=(M+3)(M-3 

(A) => M +3=28 and M-3 =2! ands +1= t,1can not be equal 
to 0. Since if l= 0, 2‘ = 7 which is absurd since s is an integer. 
Hence s>12 1. 
Eliminating M from (A) we get 
6 = 28-2! = 2! (254-1) 
ie.2!=2orl=1,251-1=3. 

Hence s s=3andt=4. 
Since 2"+3=4 >n=0. 
ncan not have any value other than 0. Hence the result. 


THEOREM 30 : All Mersenne numbers for which n is odd and greater 
than one can not be triangular number. 
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PROOF : Mersenne number is 2" — 1. In order that it will be a triangular 
number, 

1 + 8 (2"-1) must be a perfect square. 

That is 1 + 23 (2"- 1) ie. 2 "3-7 is a perfect square. 

That is 23-7 = M?. 

If nis odd, n + 3 is even. Letn+3=2k, then 

2?k_ M2 =7 => (2k + M) (2k —M) =7. 
=>2k-M=1, 2*+M=7 
=> 4 oF -1 =7, 

or 2K = 4ie.k=2andn=1. 
Ref: M. Satyanarayan, Math Student 1968. 


1.9. SOLUTION OF EQUATION IN PRIME NUMBERS : 


We know many simple equations about which we do not know whether 
they have many solutions in prime numbers. 

For example: The equation x + y = z. The solution of this equation in 
prime number x, y, z is equivalent to the question, whether there exists infi- 
nitely many pairs of twin primes, for, if p, q and r are prime numbers such that 
p + q =r, obviously the prime number p and q can not both be odd (because 
then their sum would be an even number > 2 and so composite). Therefore one 
of the numbers p and q, say q is even and so equal to 2. The numbers p and r = 
p + 2 would then be a pair of twin primes. If the number p and r= p +2 are a 
pair of twin primes then the numbers x = p, y = 2, z= p + 2 are primes and give 
the solution of the equation x + y =z. 


Consider the equation 2x + 1 = y. We do not know they have infinitely 
many solutions. The solution of 2x + 1 =y, (x, y) = (2, 5), (3, 7), (5, 11), (11, 
23) and for 2x — 1 are (2,3), (3,5), (7, 13), (19, 37). Equations of the type 
x+y = z+tand x? + y* =z* +t” have infinitely many solutions in distinct 


primes x, y, z and t. 


1.10. MAGIC SQUARES : 


A magic square consists of a series of integer arranged in a square so that 
the sum of the number in any row or column is always the same. Magic squares 
have been known since ancient times. The construction of magic squares is a 
favorite topic in recreational mathematics. 


In early school days Ramanujan’s attention was devoted in constructing 
magic squares. 


{ j 


7 


’ 
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The following are the examples of magic squares 3 x 3 with sum (i) r= 15 
and 


(ii) r = 27 where r is the sum of rows and columns. 


Construction of magic squares : 


Consider two sets of natural numbers. S; = { A, B,C... },S2={ P,Q, 
R...} each with n elements. Take the n? number in the direct sum S; +S. and 
arrange them in an n x n square so that each letter appears exactly once in each 
row, column and diagonal. Then we get a magic square. 


Entry (i) : Let m; and mgdenote the sum of the middle row and middle 
column respectvely of a3 x 3 square aaray of numbers. Let c, and cy denote the 
sums of the main diagonal and second diagonal, respectively. Let S denotes the 
sum of all nine elements of the square. Then if x denotes the centre element of 
the square 


x = 1/3 (my + my +c) +c) —S). 
It is clear that 

m, + m2 +c; +c) =S + 3x 
as x is counted four times in the left side. 


Entry (ii) : Suppose that the sum of each row and column is equal to r. 
Then if x denotes the centre element of the square then 


x = 1/3 (cy +¢2—-r) 
since by entry (7) 
X= 1/3 (r+r+c) +¢2—-3r) = 1/3 (cy +e2-P). 


Note that if the square is magic, then entry (ii) implies that x = 1/3 ice. ris 
a multiple of 3. 
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Result : In a3 x 3 magic square the elements in the middle row, middle 
column, and each diagonal are in arithmetic progression. 


PROOF : In each case the second element or middle one is r/3. If a and b 
are the first and third elements, respectively then a + 1/3 + b=r 


=>b-1/3=1/3-a 


i.e. three numbers are in arithmatical progression. 
Example 1 : r= 15 middle term = 15/3 = 5, a+b = 10. 
The values of a and b are the pairs (1, 9), (2, 8), (3, 7), (4, 6). 


Example 2 : Construct magic square with (i) r=36 and all elements even 
and (ii) r= 63 and all elements divisible by 3. 


Solution: In the first case x = 12 and in the second case x = 21. 


1.11. DISTRIBUTION OF PRIME NUMBERS : 


We now introduce a function 7 (x) which is a measure of distribution of 
primes amongst the natural number. 
Definition : For each real number x, 7(x) denotes the number of primes 
that do not exceed x, i.e. 
Mx)=d 1. 
psx 
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; Example : m (—1)=7 (1) = 0,7 (2) = 1 (5/2) = 1. 
THEOREM 31 (PRIME NUMBER THEOREM) : 
The prime number theorem asserts that 
MX) 
x0 (x/logx) ~ 


In Chapter 4 we will do elementary proof of this prime number theorem. 


1.12. SOME MORE NUMBERS AND THEIR COMPUTER 
P PROGRAMMING 


AMICABLE NUMBERS OR FRIENDLY NUMBERS : Let m and 
n be two integers such that o(m) —-m=nando (n) —n=m, thenmand nare 
Said to be amicable pair. Here o(m) denotes the sum of proper divisor of m. 
Example : The smallest amicable number s are 220 and 284 because 
) 
GO (220) = 14+24+44+5+10+11+20+44+55+110 = 284 
and G (284) = 1 +2+44+714+142 = 220. 


THEOREM 32: A pair of integers (m, n) is amicable if and only if 
mm (9) o(m)=0 (n)=m+n. 

PROOF: (i) Leto (m)=o(n)=m4n 

Then o(m)—m=nando (n)—n=m. 

Therefore (m, n) is an amicable pair. 


(ii) Let (m, n) be an amicable pair then 6 (m) -m=nando(n)—n=m 
Flence 


o(m)=m-+nand o (n) =n +m. Hence proved. 


There are about 400 amicable pairs of numbers known, of which some 


220 and 284 (the smallest pair) 
1184 1210 

2620 ' 2924 

5020 5564 

6232 6368 

10744 10856 


12285 14595 
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17296 18416 

63020 76084 

66928 66992 

67095 71145 

69615 87633 

79750 88730 

9 363 584 9 437 056 

111 448 537 712 118 853 793 424 


Several methods are available for finding amicable pairs. One common 
method is to let 


A= (3) (2*)-1 
B= (3) (2™"))-1 
C=(9) @*-4) -1. 
If x is greater than 1, and A, B, and C are all primes, then 2* AB and 2*C 


constitute an amicable pair of numbers. For example, if x = 4, then A=47,B 
=23, and C = 1151, which are all primes. Then 


(24) (47) (23) = 17 296 
and 
(24) (1151) = 18 416. 


The following is the BASIC program to produce the next pair of amicable 
numbers. 


100 REM AMICABLE NUMBERS 
110 FOR A = 1 TO 7000 

120 LETS =0 

130 FOR D = r'TO A/2 

140 IF A/D < INT (A/D) THEN 160 
150 LET S = S+D 

160 NEXT D 

170 IF S <= A THEN 260 

180 LETB=S 

190 LETT =0 


200 FOR F = 1 TO B/2 
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210 IF B/F <> INT (B/F) THEN 230 
220 LET T=T+F 
230 NEXT F 
240 IF T <.> a THEN 260 
250 PRINT A; “AND”;B; “ARE AMICABLE NUM- 
BER” 
260 NEXTA 
270 END 
RUN 


220 and 284 are amicable numbers. 


1184 and 1210 are amicable numbers. 


1.13. ARMSTRONG NUMBERS 
One hundred fifty three is an interesting number because 
153 = 13 +53 +3, 


Numbers such as this are called Armstrong numbers. Any N digit number 
is an Armstrong number if the sum of the N"” power of the digits is equal to the 
Orginal number. 


The following program finds three —digit Armstrong numbers. 


100 REM ARMSTRONG NUMBERS 

110 FOR N = 100 TO 999 

120 LET A = INT (N/100) 

130 LET B = INT (N/10) — 10*A 

140 LET C = N -100*A-10*B 

150 IFN <>A13 + B13 + C13 THEN 190 

160 PRINT “ARMSTRONG NUMBER”;N 

170 PRINT “EQUALS”; AT3;” + “;BT3;” + “:CT3 
180 PRINT 

190 NEXT N 


200 END 
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| 
i RUN 
| 


ARMSTRONG NUMBER 153 
EQUALS 1 + 125 + 27 


| ARMSTRONG NUMBER 370 
} EQUAIS 27 + 343 + 0 


ARMSTRONG NUMBER 371 
I] EQUALS 64 +.0 + 343 


1.14. LUCKY NUMBERS 


A group of investigators working with Stanistav M. Ulam at Los Alar 
scientific laboratories have discovered what they call the lucky number deter: 
mined by a sieving process. As with the sieve of Eratosthenes, we begin by 
writing down all the natural numbers, in order, limiting ourselves to the fixst 
hundred to illustrate the process. If we leave 1 and strike out every second 
HI) number, we eliminate all the even numbers. 


7 9 
13 yw 
21 xB 25 iy % 
31 33 ay 37 39 
43 WY ia 49 
| Be i) 
63 oF 67 69 
| Hl yw 719 
| 87 Sy 
a 


Oo 


93 5 99 


In Eratosthenes sieve we next struck out every multiple of 3 because 3 ws 
| the next surviving number. The rule here is different: strike out every thi 


number among those remaining. That means that 5 goes, and 11.17. 23, et¢ 
All such numbers are crossed out by a single slant line. The next survivi®) 
number is 7, so we let that stand and cross out every seventh remaining O1) 
(19,39,etc.) with two slant lines, to indicate what is happening . Then cross ij 
every 9" then every 13", and so on. The slant lines indicates at what stage | 
the construction each number was eliminated. 
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BUNDANT AND DEFICIENT NUMBERS 


‘number the sum of whose divisors is less than the number itself is 
ficient, and a number exceeded by this sum is called abundant. As 
ed in section 1.8, the number is perfect when the sum of the divisors of 
er, excluding the number itself, equals the number in question. 


eeample, 

6=1+2+3 and is perfect. 
12<14+2+3+4+6 and is abundant. 
10>1+2+5 and is deficient. 


hie following BASIC profram factors a given number into its divisors 
es whether the number is abundant, deficient, or perfect. 


REM ABUNDANT AND DEFICIENT NUM- 
BERS 


PRINT “THIS PROGRAM WILL TAKE A 
NUMBER AND” 


PRINT “COMPUTE THE SUM OF ITS DIVI- 
SORS” 


PRINT 

PRINT “TYPE THE NUMBER”; 
INPUT N 

LETS =0 

PRINT “THE DIVISORS OF “;N;”ARE”; 
FOR X = 1 TON-1 

IF N/X <> INT 9N/X) THEN 220 
LETS=S+X 

PRINT X; 

NEXT X 

PRINT 

IF S>N THEN 280 

IF S<N THEN 300 

PRINT N; “IS PERFECT” 
GOTO 310 
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280 
290 
300 
310 
320 


330 
340 
350 
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PRINT N; “IS ABUNDANT” 

GOTO 310 

PRINT N; “IS DEFICIENT” 

PRINT 

PRINT “TYPE 1 TO CONTINUE; 2 TO 
STOP”; 

INPUT Z 

IF Z= 1 THEN 130 

END 


RUN 


THIS PROGRAM WILL TAKE A NUMBER AND COMPUTE THE 


SUM OF ITS DIVISORS 


TYPE THE NUMBER ? 12 

THE DIVISORS OF 12 ARE! 2 3 4 6 12 ISABUNDANT 
TYPE 1 TO CONTINUE, 2 TO STOP ? 1 

The following is the BASIC program for computing prime Number gen- 


erators less than 400: 


10 
12 
15 
20 
25 
30 
35 
40 
45 
50 
55 
60 
65 
70 


REM PRIME NUMBER GENERATOR 


DIM A[400] 

PRINT “PRIME NUMBERS” 
LET R=1 

LET A[1] =2 

LET P=1 

FOR X = 3 TO 400 STEP 2 
FORY=1TOR 


IF INT (X/A[Y] * A{Y] = X THEN 95 
NEXT Y 

LETR=R+1 

LET §[R] = X 

IF P>6 THEN 85 

LET P = P+1 
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75 PRINT X; 
80 GOTO 95 
85 LET P=1 
90 PRINT X 
95 NEXT X 
‘RUN 
PRIME NUMBER 
3 5) 7 11 13 17 19 
23 29 31 37 41 43 47 
33. 59 61 67 71 73 79 
83 89 97 101 103 107 109 


113 127 131 137 139 149 151 
157 163 167 173 179 181 191 
193 197 199 211 223 227 229 
233 239 241 251 257 263 269 
271 277 281 283 293 307 311 
313 317 331 337 347 349 353 
359 367 373 379 383 389 397 


The following is the BASIC program that will determines whether a given 
imber positive integer is a prime number 


100 REM IS THE NUMBER PRIME ? 
110 PRINT “WHAT IS THE NUMBER”; 
120 INPUT N 

130 IF INT (N) = N THEN 160 

140 PRINT N; “IS NOT AN INTEGER” 
150 GOTO 250 

160 IF N>=2 THEN 190 

170 PRINT N; “IS LESS THAN 2” 


180 _ GOTO 250 


40 
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190 FOR 1 = 2 TO SQR (N) 
200 IF INT (N/I) = N/I THEN 240 
210 NEXT I 
220 PRINT N; “IS A PRIME NUMBER” 
230 GOTO 250 
240 PRINT N; IS NOT A PRIME NUMBER” 
250 PRINT 
260 PRINT “TYPE 1 TO CONTINUE; 2 TO 
STOP”; 
270 INPUT C 
280 IF C=1 THEN 110 
290 END 
RUN 
WHAT IS THE NUMBER ? 624 


624 IS NOT A PRIME NUMBER 


TYPE 1 TO CONTINUE; 2 TO STOP 71 
WHAT IS THE NUMBER / 769 

769 IS A PRIME NUMBER 

TYPE 1 TO CONTINUE; 2 TO STOP ? 1 
WHAT IS THE NUMBER ? 1 


1 IS LESS THAN 2 


TYPE 1 TO CONTINUE ; 2 TO STOP 71 
WHATE IS THE NUMBER? 76,34 
76,34 IS NOT AN INTEGER 


TYPE 1 TO CONTINUE; 2 TO STOP ? 1 
WHAT IS THE NUMBER? 953 
953 IS A PRIME NUMBER 


TYPE 1 TO CONTINUE; 2 TO STOP 22 
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1.16. FIBONACCI NUMBERS 


The sequence wy, Ug, U3 .... U, in Which uy = 1, wy = 1, uy = 2 
and(u, = u,_; + U,_2) for every n 2 2 is called a Fibonacci sequence and it 
is termed as the Fibonacci number. The first few terms of the sequence are |, 1, 
2, 3, 5, 8, 13 ...as 


uy = U3 + Ug = 241 =3 

Us =uy +u3=3+2=5 

Ug = Us + U4 = 5+ 3= 8 
and so on. 


THEOREM 33 : For the Fibonacci sequence {uy}, gcd (Uy, Upy1) = | for 
 everyn21. 


PROOF : Let us suppose that the integer d > 1 divides both u, and u,4). 
Then their difference uy4)—Up =Up_; Will also be divisible by d. From this and 
from the relation u, u,_1 Up_2 it may be concluded that dlu,_2. The same argu- 
_ ment shows that dlu,_3, dju,_4, and that dju,. But u; = 1 This contradicts our 
assumption that d> 1. hence d= 1. 


The question is whether u, is prime for n prime. The answer is no, because 
Ujg = 4181 = 37.113. 


THEOREM 34: The greatest commen divisor of two Fibonacci num- 
bers is again a Finonacci number, specially 


ged (uy, Uy) = Ug, where d = ged (m, n). 
PROOF : Assume that m 2 n By Euclidean Algorithm we get 
m=qn+r, O<rm<n 
N=qQot%+m, O<m<r, 
n=QBMtR, O<mA<r 


M2=Qntritt, O<t<tp1 


Th-1 = Qn+1 I + 0. 


ged (Um, Un) = ged (Ugptrl » Up) 
= ged (Ugin-} Ur +Ugnt Ungi+,> Un) 
=gced(u qin-l Ur, Un). 

Since ged (atc, b) = ged (a,b), 

gcd (Up, Un) = ged (Uy, Up) 
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sa ged (Up, Uy) 
SF leetdee = ged (Upn_1, Um), 
Since ry| ty) , we have Uyp | Uppy, 
whence gcd (Uyp_}, Upp) = Usp - 


But r,, being the last non zero remainder in the Euclidean Alogorithm for 


m and n, is equal to gcd (m, n) we get 


ged (up, U;) =u ged (m, n)- 
Hence proved. 


Corollary : In the Fibonacci sequence, uy, | uy if and only if min 


for m => 2. 


PROOF : If uy, | up, then ged (up, Up) = Up. 
But ged (uy,Uy) = Uged (m,n)- 
This implies that ged (m, n) = m. From which it follows that m | n. 


Here we give a BASIC program that computes and prints 30 Fibonacci 


numbers. 


100 REM FIBONACCI NUMBERS 
110 DIM F [30] 

120 PRINT “FIBONACCI NUMBERS” 
130 PRINT 

140 LET F{1] = 1 

150 LET F[2] = 1 

160 FOR N= 1T0 28 

170 LET F[N+2] = F[N+1] + F[N] 

180 NEXT N 

190 REM PRINT 30 FIBONACCI NUMBERS 
200 FOR X = 1 TO 30 

210 PRINT F[X] 

220 NEXT X 


230 END 
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RUN 
FIBONACCI NUMBERS 


987 
1597 
2584 
4181 
6765 
10946 
17711 
28657 
46368 
75025 
121393 
196418 
317811 
514229 
832040 


1.17. FIBONACCI NUMBERS AND PRIMES 


The BASIC program in the last section produced the first thirty Fibonacci 
numbers. As you have observed, all of these Fibonacci numbers are integer 
quantities, and some are prime numbers. 


Let us now consider the problem of generating Fibonacci numbers and 
identifying those that are primes. An outline of the program procedure is : 
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1. Set Fl and F2 to | (F1 is the first Fibonacci number (F,-2) and F2 
second Fibonacci number (F,_1)- 


Print F1 and F2 identifying each as a prime number. 


3. Perform the following calculations for I = 3, 4,... 25. 


pa 


(a 
(b) 
(c) 
(d) 


Calculate a value for F using the formula F = Fl + F2. 
Test to see if F is a prime number. 
If Fis a prime , identify it as such. 


Update F1 and F2 in preparation for calculating a new Fibonacci 
number (assign the current value of F1 to F2, then assign the 
value of F to Fl) 


A BASIC program corresponding to the previous procedure follows : 


100 
110 


120 
130 
140 
150 


160 
170 
180 
190 
200 
210 
220 
230 
240 
250 
260 
270 


REM FIBONACCI AND PRIME NUMBERS 


PRINT “HOW MANY FIBONACCI NUM- 
BERS”; 


INPUT N 
PRINT 
PRINT 


PRINT ‘FIBONACCI AND PRIME NUM- 
BERS” 


PRINT 

LET Fl=1 

LET F2=1 

PRINT “I=”; 1, “F=";1,” (PRIME NUMBER)” 
PRINT “I=”; 2, “F=”; 1,” (PRIME NUMBER)” 
FOR I= 3 TON 

LET F= Fl +F2 

FOR J=2 TO F-1 

LET Q=FIJ 

LET QI=INT (Q) 

IF Q=Q1 THEN 300 

NEXT J 
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280 PRINT “I=”; I. “F="; F; “(PRIME NUMBER)” 
290 GOTO 310 
300 PRINT “I=”; I, “F=";F 
310 LET F2=F1 
320 LET F1=F 
330 NEXTI 
340 END 
RUN 


HOW MANY FIBONACCI NUMBERS?24 
FIBONACCI AND PRIME NUMBERS 


k= F=1 (PRIME NUMBER) 
2 F=1 (PRIME NUMBER) 
L=3 R=2 (PRIME NUMBER) 
1=4 P= 3 (PRIME NUMBER) 
1=5 F=5 (PRIME NUMBER) 
1=6 F=8 

l=7 F=13 (PRIME NUMBER) 
1=8 F=21 

L=9 F=34 

I= 10 F=55 

c= F=89 (PRIME NUMBER) 
J=12 F= 144 

L=13 P= 233 (PRIME NUMBER) 
1=14 F=377 

= 315, F=610 

L= NG F=987 

T=17 F= 1597 (PRIME NUMBER) 
b=18 F = 2584 

1=19 F=4181 

1=20 F = 6765 

L=21 F= 10946 

WE) F=17711 

Tai23 F = 28657 (PRIME NUMBER) 


l= 24 F = 46368 
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EXERCISES 


Prove that if (a, b) = 1 then 
(i) (a", b‘) = 1 for alin > 1, k>1 
(ii) (a+b, a2 —ab + b?) is either I or 3. 


(ii) (a+b, a—b) is either 1 or 2. 


26k+2 
Prove that 19 | 2 Si fork O02)... 
Find all integers n> 1 such that 1"+2"+..... +(n-1)" is divisible 
by n. 


Prove that for positive integer n 


@ mr lM" =1 Gi) 27=1)212Q2"-Y" _}) 
Prove that for odd n, n 12"! 1. 

n 
Prove that (n, pai ee 1) =1 for n= 1, 2, 


Find all primes which can be represented both as sums and as 
differences of two primes. 


Find four solutions of the equation p? +1 = q? +r? with primes p, q 
and r. 


Find the least positive integer n for which n4 + (n+1)* is composite. 
Show that for n >1 the number (i) 1/5 (24"*2 +1) is composite. 
(ii) 1/3 eile + 22" +1) is composite . 


Find all numbers p such that all six number P, p+2, p+6, p+8 and 
p+14 are primes. 


Prove that the Mersenne number Myo is composite . 

Find all positive integer n > 1 for which (n-1)! + 1 =n?2. 
Prove that 

(a) 815747 [Hint: 5°) 47 = 52 (52k 47) 47-52 7] 
(b) 15124"-1 

(c) 513 3 n+l ae gn+l 

(d) 2114 1+! 452n-l 

(e) 2412.74 3.5"-5, 
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1S: 
; 16. 

{ AF 
18. 


os 


20. 


21. 
poe 


Prove that (2n)! /n ! (n+1)! is an integer. 

Prove that if d!n then 24-11 2" -1. 

Show that a"| b” implies a | b. 

Show that the Fermat number Fs is divisible by 641. 


For n= 2, show that the last digit of the Fermat number F, = aie 
is 7. 


If n is a perfect number prove that y I/d=2. 
din 


Prove that every even perfect number is a triangular number. 
If m and n are amicable numbers prove that 


=] Fea | 
= »») & 
(ain !79) + (a,t/4) =1 


oo 


ARITHEMETICAL FUNCTIONS 


2.0. INTRODUCTION : 


Number theory like many other branches of mathematics, concern with 
sequence of real or complex numbers. 


DEFINITION : A real or complex valued function defined on the posi- 
tive integer is called an arithmetical function or a number theoretic function. 
Symbolically we write arithmetical function as 


f:Z, >R(C). 


2.1. MOBIUS FUNCTION ,(n). 
DEFINITION : The Mobius function 1 is defined as follows: 


Hd) =1; 
If n> 1, write n = p,*....p,°. Then 
w(n) =(-1)K ifa;sag=....= a, =1 


uu (n) =0 otherwise , 


i.e. 1(n) = 0 if and only if n has a square factor >1. In other words 
H=N- {-1,0, 1}. 


Example 1. Find the value of (720). 
Solution : 720 = 24x 37x 5. 
Hence (720) = 0. 


n 
Example 2. Find > p(k! ). 
k=I 
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Solution : Pe) =p(1) + (2!) + HB) + (4!) + pOS)+.... 
= w(1) + (2) + (6) + W(24) +. 2... 
Hk) =1-141+0+0+....=1. 


___ Mobius function arises in many different places in number theory. We will 
study its most fundamental properties. 


THEOREM 1: If n2=1 we have 
ne _jlifn=1 
Beata ae 


where I(n) is identity function. 


? 
PROOF : The formula is clearly true if n =1. Assume, then, that n>! and 


S11) ='0} 
DEFINITION : For each positive integer n, 
we denote d(n) as 
d(n)=#{k:k[n}= > 1. 
din 
We also write r(n) for d(n). 
o(n) = sum of the divisors of n, 


o,(n) = é dk = sum of the k!" power of divisor of n. 
a : 
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2.2. THE EULER TOTIENT FUNCTION O(n). 


DEFINITION : If n >1 the Euler totient (n) is defined to be the number 
of positive integers not exceeding n which are relatively prime to n; thus 


(1) (m)= & 1=Total number of integers less than n and relativity, prime 
din 


ton (k,n) =1. 


If n = p (a prime) then (n) = @(p) = p-1. 
For example @(8) = 4, because 1, 3, 5, 7 are relativity prime to 4. 


Now the question is how to find @(n) when n is given in the standard 
form i.e. 


Tr 
n= u pi*i - Like © j1(d) we will find the value of the summatory func- 
i= din 


tion of ~(n) i.e. E @(d). The following theorem gives the answer to our ques- 
din 


tion. 


Before going to the theorem we will first define multiplicative function. 


DEFINITION : An arithmetical function ‘f’ is called multiplicative if f = 
O and if f(m n) = f(m) f(n) for m, n; such that (m,n)=1. 


A multiplicative function ‘f’ is called completely multiplicative if we also 
have 


f(m n) = f(m) f(n) for all m, n. 


A function f which is completely multiplicative is multiplicative but the 
converse is not true. 


Examplel : Let { (n) = n%, where o is a fixed real or complex number. 


f, is completely multiplicative because (mn)* = n&.n® for all m,n. Hence 


fy, (n) Is multiplicative. 


Ez 
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Example 2: The function (n) is multiplicative but not completely 
multiplicative. Consider first m, n such that (m, n) =1. Either m or n has a 
_ Square factor. Hence (mn) = uu(m) y(n) = 0. If neither has a square factor, 
write m =p; P2.-.Pr N= qi qo --.dk. (mn) = (-1)"**, ju(m) = (-1)F, p(n) = 
(1) Since (—1)¥#* = 1)" (-1)K, we have (mn) = (-1)"**= 1)" (1) wm) 
H(n). Hence jt is multiplicative. But s(n) is not completely multiplicative 
since 1 (8) =0, 8=23, w(2) =-1, w(2°) = (1) C1) C1) =-1. (8) + 12) 
H(2) (2). 

Example 3 : Find 9 (720). 

720 = 24 x 32x 5, (720) = 720 x (1— 1/2)(1— 1/3) (1- 1/5) 
=12x2x4=96, 

THEOREM 2: If p is a prime and k > 0, then @ (ps) = pX- pt! 
= pk(1- I/p). 

PROOF: There are p*~! integer between | and pk i. e. 

p. 2p, 3p..-(P!)p which are divisible by p. The set { 1,2,...p*} contains 
exactly p*p'-! integer which are relatively prime to p* and so, by definition of 
Eluler’s @ function @ (p*) = pk-pk-!. 

For example 
(8) = 9 (23) = 23-2? =8-4=4, 
(27) = @ (33) = 33-3? = 27-9 = 18. 


LEMMA : gcd (a,bc) = 1 if ard only if ged (a, b) = 1 and ged (a,c) = 1, a, 
b, c are integers. 

PROOF : Let d = ged (a,b) then by definition of gcd dja and d|b whence 
dja and djbe. This implies ged (a,be) > d which forces d =I. Similarly for (a.c) = 1. 
Only if part: Let ged (a,b) = 1 = ged (a, c) and assume that ged (a, be) =d)> 1. 
Since dj| be, it follows p | be; p is a prime divisor of dy. Hence p|borp|c. If 
p|b then ged (a,b) = p, a contradiction. Similar argument follows for ged (a, c). 


Thus d)=1. 
Example 4 : The function ¢(n) is a multiplicative function but not com- 


pletely multiplicative function. @(n) is not completely multiplicative follows 
from the fact that 


9(4) = 2, 9(2) =1, (4) # @(2) 9(2). 
Multiplicity of ¢(n) will be proved in the next chapter on congruence . 
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T . 
THEOREM 3: If the integer n>1 has the prime factorization n= a pa 
is 


T 
then 9(n)=n IT () -+} 
( Pi 


PROOF : If n =p‘, there are p‘-1 positive numbers less then p‘, of 
which p -1_] are multiples of p and the remainder prime to p. 

Hence © 

@(p*) = (pX-1) ~(p 1-1) = pk (1 - Ip) 

and the general value of ¢(n) follow from the multiplicity of @(n) . 


T Tr 
Since n= et Pri. o(n) = a 9 (piri) 
ic iz 


is 


i 


: pi (1 - Ip) 


Tr T 
= II pi Tl (1-1/p)) 
i=! i=l 


r 
=n II (1-I/p,)=n 1 (1-I/p). 
i=l pin 
The right hand side product is independent of prirne power of n. 
THEOREM 4: > 9(d) =n. 
dia 


PROOF: Ifn= 11 pX, then the divisor of n are the numbers d = H pe 
pin pln 
where 0 < k<k for each p; and 


A 
Eed)= = Ny(p* ) 
din P, ma 
=T1 {I+ o(p)+o (p?) +t @ (p} by the multiplicatve property of 
Pp 
p(n) . 
But 1+ (p) + o(p?) +...+ 0 (pS) 
= 14 (p-l) + p (pel) +...4p(p-1) 


ke 
kK 


Pls 
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So that 
ae 
We can prove theorem 4 without using multiplicative property. 


Second method of proof of theorem 4 : Let ‘S’ denote the set {1, 2,..n}. 
We distribute the integers of S into disjoint set as follows: For each divisor d of 
n, let 


A (d) = {k: (k, n)=d, 1 < k <n}. 
UA (d)=S. 
d 
If f (d) denotes the number of integer in A(d) we have 
= f(d) =n. 
din 


But (k, n) = d if and only if (k/d, n/d) = 1, 
and 0< k < nif and only if 0<k/d <n/d. 


Put q=k/d then 0 <q < n/d. There is one-to-one correspondence 
between the elements in A(d) and those integers q such that (q, n/d ) = 1. The 
number of such q is @(n/d ). Hence f(d) = p(n/d ). We have 


= o(n/d ) =n. 
din 
This implies 2 o(d) =n, because if d runs through divisor of n so does n/d. 
din 


This completes the proof. 


RELATION BETWEEN ®(n) AND p(n). 
THEOREM 5: If n= 1, we have p(n) = > j(d) n/d. 
din 


PROOF: 9(n) = 2 = 
(n, =I 


TMs 


‘ [1/(n,k)] 


where [x] is the greatest integer function. 
By Theorem 1. 


n 
p(n) = > > wd)= & pd). 
k=1 di(nk) din 


Mh 
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For a fixed divisor d of n we sum over all those k in the range 1<k<n 
which are multiples of d. 


Taking k=qd, 1< k<nifandonly if 1<q<n/d. Hence 
n/d n/d 
gm@)= = =X pd) =z wd) > 1 
din g=1 din q=l 
= LD p(d) n/d. 
din 


Remark. Theorem 3 can be deduced from theorem 5 by using the fact 
that 


Tr 
TI (1 — 1/p) = 1a - 1/p;) 
pin i=] 


= 1-2 1/p, += Wpipj ---- + C1)"/ (py+ po--- + pa) 
=> wd)id. 
din 


Hence p(n)= 5 p(d)n/d=n TI (i-1/p). 
din din 


THEOREM 6: If d=(m,n), then 9(m n) = @(m) ~(n) (d/p(d)). 
PROOF: g(n)/n= yy (1-1/p), o(m)/m= TT (i- 1/p). 
din plm 


Since every prime divisor of mn is either a divisor of m orn, and those 
primes which divide both m and n also divide (m, n), we have 


FE Tent fs) 
ait es — Pim pin 
Oe ear a 1/p) NOMURA TUT aa Gaiupy 
pl(m,n) 
— o(m)/m.o(n)/n 
o(d)/n 


> @(mn) = e(m) 9(n) (d/p(a)). 


Corollary : ¢(mn) = 9(m)g9(n) if (m,n) =1, It is trivial by putting d= 1 in 
Theorem 6. 


THEOREM 7: 9(n) is even for n> 3. If n has r distinct odd prime factors 
then 2"\o(n). 


PROOF : If n=2", > 2 ¢(n) = @(2') = 2-2"! implies that @(n) is even 
for n > 3. If n has at least one odd prime factor we write 
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o(n) =n Ty (p-l/p) 
pin 


n 
=— TI (p-1 
Tip rtd ) 


=kII(p-!), 
, pin 


where k = n/ qq p is an integer and since p is odd, p-I is even. If n has r 
7 F pin 
distinct odd prime factor then 2"| p(n). 


Remark : All ¢(n) are even. Only odd g(n) are for n= 2 andn= 1. 
Example : Evaluate (350). 

As 350 =2x 5?x7 

(350) = (2) (52) @(7) = 1 x (57-5).6 = 120. 


THEOREM 8: Let mand n be integer both greater than | and every 
rime divisor of n is a prime divisor of m. Then 


(i) 9 (mn) =n 9(m) 

(ii) o(n2) =n Q(n) forall n= 1. 

PROOF : (i) By hypothesis m and n can be written as 
n =p" po... - Px 

and m =p po. + PRY Pkt! + + PC's 

pj being prime, rj, sj integers each > 1 andt>k. 

(mn) = pC pis pot... pret Peer! =. Pr) 
=D (pI) eee @ CPM) oO (PE) 


= (py = py!) (post po OT). 
@ (Per!) OCP) 
= (pi... pe (pi — pis!) ( — po") - 
© (Pes)... @ CPE) 
= Me @ (Py) cesses © (p) 
= m@(n). 
Putting m= n we get (ii) 
But if the same prime divides both mand n then n @ (m) = mg(n) is not 
always true. For example taking m = 6,n = 8, 8-9 (6) #6: (8) 
Example : If (m, n) = | then (9(m),9(n)) = 1 is not always true. For 
example take m= 6, n= 7. (6,7) = 1. But @(m) = 2, p(n) = 6, (—(m),Q(n)) >I. 
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THEOREM 9 : For n > 1, the sum of the positive integer is less than n 
and relatively prime to n is % ng(n). 

PROOF : Let aj aq .. aQ(n) be the positive integers less than n and rela- 
tively prime to n. Now since ged (a,n) = 1 if and only if ged ( n—a, n) = 1, we 
have 

aj + a2 +... + AD(y) 
= (n-a;) + (nag) +.... +(n-ag,) 
= p(n) n= (ay + a2 +... + A—(y)) 
Hence, 2(ay + az + ..... + AM) = P(N) n 
=> a) tag t....+ aM) = 1 Q(n) / 2. 


Example: bk =14+3+7+411+134+17+9419. 
Isks20 
(k,20)=1 
=80 =200(20)/2. 
9(20) = (27,5) = (2?) (5) =2x4=8. 
THEOREM 10 : Let f and F be number theoretic function such that 


F(n)= & f(d). . 


Then , for any positive integer N, 
N N 
= F(n)= £ f(k) [N/K], 
n=l k=l 


PROOF : We note that 


N N 
(1) x Kin)= 5 & f(d) 
k=1 din 


n=1 


For a fixed positive integer k < N, the term f(k) appears in a f(d) if and 


only if k is a divisor of n. There are exactly [N/k] number of terms among 1,2 
..-N which are divisible by k. They are k, 2k, 3k ... [N/k] k. Thus for each k 


such that 1 <k<N, f(k) isa term of the sum a f(d) for [N/k] different positive 


integer less than or equal to N. We may write the double sum in (1) as 


N N 
z Efid)= z fk) [N/k]. 


Example 1: 5 p(d) [n/d] = n(n+1)/2 for any positive integer n. 
d=1 
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Solution : By Theorem 9, 


n 
3 (dinid] = 5 ¥ g/d) 
d=1 k=1 dik 


n 
= Y k=14+2+4+.4n=n(n+1)/2. 
k=1 


Example 2: Prove that n/p(n) = > 2 (d) 1 @(d). 
din 


Solution : If n= p,p... p, ( We consider the product of distinct Primes 
only because j1(n) = 0, if n contains a square . 


Again u2(n) / @ (n) is multiplicative. 


Let Gin) = = w7(d)/ o(d) 
i 
If n= 2 pi 
i=l 
% r F 
then G(n) = ‘at G (pi”) 
iS 


= (1+ Vo(p))(1 + 1/e(p2)).....C1 + Me (p,)) 
= (pi/pi-1) (p2/p2-1)..... (p/p -1) 
= 1/(1-1/p,) 1/1-1/pg)...... 1/(1-1/p,) 
= n/p(n). 
Example 3 : Find all integers n such that 
(i) p(n) = e(2n) 
(ii) p(n) = n/2 
(iii) @(n) = 12 
Solution : Proof of (i) @(n) = @(2n) holds for n = 1, 3,5,7,.... 
(ii)p (a) = n/2 if and only if n= 2k for same k > 1. 
If T= 2) p@haoks2ks ok Menino 
If n = 24N, Nis odd then 
o(n) = @ (2 N) = 2kN/2 
(2%) g(N) = 21 N. 
2k-leny = 2k N, 
Ne=l. 


BUY 
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(iii)12 =3 x 4. Suppose n=st, (st) = g(s) o(t) 


To show that p(s) = 3, M(t) = 4. 
There is no s for which @(s) = 3. 
12=2x6, 9(3)=2, (7)=6. 
o(4) =2 
12=12x1 g(6)=2 


. (13) = 12, 9(2)=1, @()=1 
The number are n = 13, 21, 26, 28, 42. 
Example 4 : Find all solutions of (i) @(n) = 24 and (ii) @(n) = 16 
Solution: (i) p(n) = 24 
(ii) Q(n) = 16 
We factorize 24=3x 8 
=2x12 
= 6x4 


In the first case there is no value of n for which (p(n) is 3 hence we discard 
the first factor. Consider the second and third factors. 


(3) =2 (13) = 12 @(S) =4 g(12) =4 
@(4) =2 9(7) =6 (9) = 6 
(6) =2 (10) = 4 o(8) =4 


So the integer n for which 
(p(n) = 24 is given by 35, 39, 45, 52, 56, 70, 72, 78, 84, 90. 
Verification : Since (3,13) = 1 
(39) = 9(3x13) = @(3) x o(13) =2 x 12 = 24 
(4,13) = 1 => 9(52) = 9(4 x13) = 9(4) @(13) =2 x 12 = 24 
(6,13) = 1 > @(78) = 9(6 x13) = @(6) o(13) =2 x 12 = 24 
(5,7) = 1 > 9(35) = 9(5 x 7)=@(5) 0(7) = 4x 6 =24 
(7,10) = 1 = 9(70) = @(7 x 10) = @(7) (10) = 6x4 = 24. 


(ii) p(n) = 16=2x8=16x1 =4x4 
(3) =2 9(5) =4 @(17) = 16 
p(4) =2 0(8) =4 9(2)=1 
(6) =2 (10) =4 
pl) =1 

(16) =8 @(15)=8 
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So the solution of @(n) = 16 are 
n= 17, 32, 34, 40, 48, 60. 


Example 5 : There are infinitely many integers n for which (i) 10| p(n) 
and (ii) @(n) is a perfect square. 


Wy 


Solution : (i) @@11= 11" = 11! = 11". 10 

Hence 10 | ¢(n) where n=11*, k=1,2,3.... 

(ii) If ma) k= 12,3, 40... 

Then (221) = g2k+1 _ 92k — 92k (2-1) = 22K = (2k)? 
Hence for n= 27+! k = 1, 2, 3, 4,... @(n) is a perfect square. 


2.3. ARITHMETICAL FUNCTION d(n) AND o(n). 


DEFINITION 1 : The number of positive divisors of n is called as 
divisor function and is denoted as d (n). 


d(n) = £1. 
din 


DEFINITIONS 2 : The sum of the positive divisors of n is denoted as 
a(n). Symbolically we write 


o(n) = pd. 
din 


We define o,(n) as 
Oo(n) = 2 d* az0 
din 


If a=0, 6, (n) =d(n). 
If a=1, 6)(n) =0(n). 
Example : n = 6, d(n) =4, 
o(n) =14+24+3+6=12 


If n is a prime p then d() = 2, and o(n) = 1 + p, To find formula for o(n) 
when n is in the standard form. 


THEOREM 11: Ifn=p;"..... p,", then 
d(n) =(aj+1) (a+ 1) ...... (a, + 1) and 


atl 
Aen cel 
i=l pj-l 


PROOF : If n= p* the divisors are 


60 Arithematical Functions 
1, p, p*, ... p*i.e. there are a+1 number of divisors of Di, 
Hence d(p*) =a+1 
and o(n) = o(p*)=1+p+p?+... p?=p**! -1/(p-1). 


Assume that the theorem is true whenever n has k or fewer distinct prime 
factors. 


Let n=n’ p* where n’ has k distinct prime factor and p, which is prime not 
a factor of n’ 


If 9 ODL Ao eels Px® 

then d(n’) = ( ay+1) (aztl)... (a, + 1) 
r .ajtl a 

and o(n’) =I Lie 
i=l pj-l 


Let dj, do, ...d, denote the d(n’) divisor of n’. Then the divisor of n are 
dj, dg, ... ds, pdy, pdz ...p ds, p2dj, p2dp......., p"d, p'dp....p*d,. 
Thus 
d(n) =d(n')(a+1) 
= (a; + 1) (a9 + 1).... (a +1) (a4+1) 
and similarly 
o(n) = o(n’) + p a(n’) +... + p*a(n’) 
=o(n’)(1+p+...+p°) 


k ,agtl_ 
= oo ; J (p**!-1/p—). 
i- 


Our theorem follows by mathematical induction. 


Corollary 1: If N= py po®e. s/o: Ps* 
then d(n) = d(p;*) d(py*)..... d(p;*) 
O(n) = o(py*) o(po*)..... 6(ps*) 


That is d(n) and o(n) are multiplicative functions. 
Example 1: d(100) = d(2?x 52)=3x3=9. 
© (100) = ((23-1)(2-1)) ((53-1)/(5/1)) = 7 x 31 = 217. 
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Example 2 : Wd =ni/2, 
din 
Solution: If n= p%, divisors of n are 1, p, Ba oah pe 


Hence I d=1,p,p2...p® = par? _ (pay (athe = (p%)s07)/2 
dip® 


In this case rd =n 22 | 
din 


If n= I p*, d(n) = I d(p®). 
pin pin 
Hence Id = 1( II )={M(p*)}/2= 08”, 
din pin dip™ pin 


Second solution: djn=>n= dd’ 
=>. d'|n and d’ =n/d. The divisor d of n are in pairs (d, n/d) 


=>(product of all divisor of n)? = (n@)? = nd) 
in 


Sn dynos. 
din 


2.4. GENERALIZED EULER’S TOTIENT FUNCTION. 


We generalize Euler’s totient function @(n) to 9(x, n) as follow: 


Let x be a positive real number and for all n let p(x, n) = the number of 
integers y such that 1 <y <x and (y,n)=1. 


Thus (n,n) =@(n). For all x and n, 
(xn) = 2 p(d) [x/d] . 


Also we can extend @(n) to @(*,k) as follows @(n,k) = the number of 
_ integer x such that 1 <x <nand (x,n)=(n+k-—x,n)=1 


9 (*,n) =9. 
If (m,n) = 1, then 
(mn, k) = 9(m, k) p(n, k) 
i. e. 9(*, k) is a multiplicative function. 


THEOREM 12: 9 (n, k) = nfl (1-22). 
pin P 
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where pls 


2if p+k. 
The proof is difficult. 


2.5. LIOUVILLE’S FUNCTION Am). 


We define another arithmetical function A(n) called as Liouvilles function 
as follows. — 


DEFINITION : We have (1) = 1 and ifn =p, po® ..... pk 
we define 

A(n) = (-)ttta2tas+atae 
4(n) is completely multiplicative since if n = p;* po ..... Px; 


m =qy qo ..... qs 
Anm) = (-1) 4-8.....%.5,,b,...b, 
=(-1)%-%...% (1) 5.5... 
= A(n) A(m) for all m,n. 


THEOREM 13: For every n> 1 we have 


_ J lif nisa square 
a OT (Beek 

PROOF : Let g(n) =e A(d). Then gis multiplicative, so to determine 
g(n) we need only to compute g(p*) for prime powers. We have 


g(p") = Z A(d)=1+A(p) +A(p2) +.....4 Ap’) 
dip* 


1-14+1....+(-1)8 


_ JO if ais odd 
~ | Lif is even 


r \ 
Hence if n=]] p;" wehave 
i=l 


r 
g(n) = IT g (p;* ). If any exponent a; is odd then g(p;") = 0 so g(n) =0. 
isl 
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Tf all the exponents a; are even then g(p;*) = 1 for all i and g(n) = 1. This 
proves that g(n) = | if nis a square and g(n) = 0 otherwise. 


Hence proved. 


2.6. VON-MANGOLDT FUNCTION 
We define Mangoldt function A (n) as follows : 
DEFINITION : For every integer n 2 1 we define 


A(n)= logp,if n= p™ forsomeprimeand some m=1 
Ootherwise. 


TABLE 1: VALUES OF A(N) 


We note that A(2) = A(2*) 


ie. A(p) =A(p), pis aprime and k >1. Itis important to find the summatory 
function © A(d). 
din 


THEOREM 14: If n> 1 we have 


(2) = A(d) = log n. 
din 


PROOF : The theorem is trivial when n = 1 because A(1) = 0 = log 1. 
“assume 


i 
n> | and writen = y7p;*. 
i=l 


Taking logarithm of both sides we have 
’ Tr 
logn = hi a; log pj. 
= 
Consider the L.H.S ‘a A(d). 
din 


The only non-zero terms in the sum came from those divisors d of the 
form p;™ for m= 1, 2...a; and i = 1, 2,....1. 
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Hence 
raj 
ZA(d)== E A(p™) 
din i=l m=1 
tr aj r 
= 2 FY logp= = a; log p; = log n. 
i=] m=1 isl 
This proves (2). 


THEOREM 15 : Ifn>1 we have 
A(n) = y pwd) log n/d=-5 (d) log d 
din din 


PROOF: A(n) = > u(d) log n/d = 7 H(d) (log n—log d) 
din din 


=logn y wd)- 5 p(d) logd 
din din 


=— ¥ pd) log d. 
din 


by theorem 1, as the first term is zero. 


2.7, AVERAGES OF ARITHMETICAL FUNCTION. 


We have observed that some arithmetical function behave most irregularly 
for large value of n. So we consider the average or mean of such arithmetical 
functions. 


f(n)=1/n S f(k). 
k=1 


f(n) behave more regularly than f (n). Also we have 
(3) lim d(n) / logn=1. 
noo 


We call the average order of d(n) is log n. To study the average of an 


n 
arbitrary function f(n) we need a knowledge of its partial sums ce f(k). 
DEFINITION : If 8(x) > 0 for all x >a, 


we write f(x) = 0 (g(x)) 


i.e. there exists a constant M> 0 such that | f(x) |< M g(x) forall x 2a, 
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DEFINITION : If Lim f(x)/g(x)=1. 
x00 


We say that f(x) is asymptotic to g (x) as x >, 


and we write f(x) ~ g(x) asx 4. 


The key theorem for all the theorems on the averages of arithmetical func- 
ion is the following Euler’s summation formula. 


THEOREM 16: If f has a continuous derivative f‘ on the interval [y, x], 
where 0<y <x, then 


(4) = f(n)= j (dt + f (t-[t)f' (t) dt 
y<nsx y _ 


+ f(x) ([x]-x)-f(y) (Ly-y). 
PROOF : Let m= [y], k= [x]. For integer n and n-1 in [y, x] we have 


n n 
J [t] f '(t) dt = j (n-1) f(t) dt 
n-l n-l 


= (n-l) (f(n)-f(n-1} 
= {nf(n)-(n-1) f(n-1)} - f(n). 


Summing from n = m+ 1 ton =k we have 


k t k k 
x } [t] f(t) dt = aly {n f(n)-(n-1) f(n+1)}— yz fn) 
n=m- 


n=m+1 — n-1 =m+l n=m+l 


k 
=> J [t] f(t) dt =kf(k)—mf(m)- = f(n) 
m y<nsx 
k 
= D f(n) =- j [t] f’(t) dt + kf(k) —mf(m) 


y<nsx m 


+ kf(x) -mf(y) — kf(x) + mf(y) 
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x 


(5) > = fn) =-f [1 FW dt + kf) - mfty) 
y<nsx y 
Again 
x x 
(6) \ f(t) dt = xf(x) — yf(y) - J tf "(0 dt 
y y 


Subtracting (6) from (5) we have 
x 


x 
= Nas =— : = 
yoo J fly) dt J [t] £"@ dt + kf(x) - mf(y) 


x x 
x FO) + ytty) + J roars J (t-{t]) f(t) dt + f(x) (Ix]-x) 
y y 


- f(y) (Ly]-y) 


x x 
=. > otis \) f(t)dt ae J (t-[t]) P(t)dt + f(x) (x}-x) 
y<nsx y y 


~fy) (ly]-y). 


THEOREM 17 : Ifx > 1 we have 


(a) Bee 1/n= log x 4 C +0 (1/x), C is a constant. 
(b) Aes I/n® = 0 (xI-5) if s> 1, 


(QOD nn =xetI O(x%) if a > 0. 
n2x 


PROOF : To Prove (a) 
take f(t) = 1/t in theorem 16 to obtain 
x 


x 
Dy | due J t-[tt2 dt + 1 — (x-[x}/x) 
nSx 1 i 
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x 


log x - J t-[t]Jt? dt +1+0(1/x) 
1 


2) 


ao 
logx+1- J t[t]/t? dt+ j t-{t]/t? dt + O(1/x) 
1 1 


Now 


ioe) oO 

0< J t-[tt2dt < j Wt? dt = I/x 
x x 

‘So we get 

q 


i : 
ED In =logx+1- J t-[t]/t? dt + O(1/x) 
nsx ri 
= logx +C +0 (1/x), 


oO 
if C=1- ' t—[ty? at 
1 


"y ao 
Y WnS= F iMS- F im’ =0(x!)ifs> 1. 
“n>x n=l nsx 


ing f(t) = t* we obtain 


x x 
np = if t dt+a J to! (t[t)dt + 1 —(-[x] ) x% 
I 1 


x 
= xt! / at] — Vat] + 0(a) J to ldt) + O(x%). 
1 


; = xl 741 +0 (x%). 
REM 18 : For all x > 1 we have 


x d(n) =x log x + 0(x). 
nsx 
d(m) ~ x log x as x 0, 
x 


IF: Since d(n) = e 1 we have 
in 
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| (Dy (hy Sesh Veet ee 
nsx nsx Sx qd 
qdsx 


Mil (Since d|n we write n = q d with qd < x) 


The sum is extended over certain lattice point in the qd—plane (by lattice 
point we mean points with integer coordinates). The lattice points with qd =n 
lie on a hyperbola, so the sum in (7) counts the number of lattice points which 
lie on the hyperbola corresponding ton = 1, 2,..., [x]. For each fixed d <x we 
can count first those lattice points on the horizontal line segment 1 <q < x/d, 
and then sum over all d <x . Then (7) becomes. 


(Ged a a0) scoala a2) oh 
nsx dsx dsx/d 


= yp [x/d+0(1)] 


dsx 
(by (c) of Theorem 15) 
=x y Id +0(x) 
dsx 
x { logx+C+ O(1/x)} + )(x) (¢ is a constant) 
x log x + O (x). 


I 


Thatis > d(n)~xlogxasx >. 
nsx 


THEOREM 19: Forx 21 
(9) » d(n) =x logx + (2C-1) x + O( Yx). 


nsx 
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PROOF : 


ye dn)= 2 & { [x/d}-d} + [vx]. 
nsvx 


nsx 


=2 y {x/d+0(1)-d} + 0 [yx] 


dsvx 
(Since [x/d] = x/d + {x/d} 
=x/d +0 (1)) 
yd iWd+01) 5 1-2 5 d+0 (vx) 
ve dsvx dsvx dsvx 


2x {log Vx + C + O(1/Vx)} + O(Vx) — 2 {x/2 + O(Vx)} + O(Vx) 
log x + (2C-1) x + O (vx). 
‘his completes the proof of the theorem 19. 
is formula (9) is due to Dirichlet and is an improvement over the for- 


y gn) =3/n* + OC log x), 
By nsx 
(© the average order of (p(n) is 3n / x? 
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PROOF : We know 
o(n) = > p(d) n/d 
din 


Hence 


xX o(n= XZ ¥ pwd)ni/d 
nsx din 


nsx 


=e daca). nid 
nsx din 


= 2 u(d) q (Since q = n/d) 
fen 

=r wd) = q 
dsx qsx/d 

= y wld) { % (x/d)? + O(x/d)} 
dsx 


(11) ="%x? ¥ p(dld?+O(x > 1/d) 
ds<x dsx 


But 
Z (did? = & pldld2— » paid? =6/22+0(4 
(12) Paeee ) ele y ea yi 6/2* +O) z 
Putting (12) in (11) we obtain ; 
E on) =%x? { 6/n* + O(1/x)} + O (x log x) 
nsx 


= (3/ x”) x? +O (x log x). 
This completes the proof . 
2.8. COMPUTER PROGRAMMING FOR DETERMINIG PRIME 


FACTORIZATION OF N AND VALUE OF PHIN (®(N)), 
TAUN(t(N)=d(N)) AND SIGMA (N) (a(N)) 


C FOR ANY INTEGER N IN THE RANGE 2 
C THROUGH 1, 073, 938, 400 THIS 


C PROGRAM DETERMINES THE PRIME FACTORIZATION OF N 
AND VALUES 


C PHI (N), TAU (N), AND SIGMA (N) 


DIMENSION NPR (3512), N FAC (10), NBR (10), N (20), INT (20), NQ 
(20) DIMENSION NPHI (10), NSIG (10) LIMIT = 3512 


10 FORMAT (1615) 
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15 READ (2.20) (NCI), 1 = 1, 20) 

20 FORMAT (2011) 

CALL DIVN (1, N, INT, NREM, M, K) 
IF (M=20) 25, 23, 25 

23 IF (N (20) = 2) 80, 70, 25 

25 NRT =NROOT (INT, M. 20) 
J=0 

DO 50 1 = 1, LIMIT. 

NF=0 

IF (NPR (I) = NRT) 32, 32, 52 

32 (ALL DIVN (NPR (1), INT, NQ, KINT, L. K) 
IF (KINT) 36, 34, 36 

34. DO35.11=M, 20 

35. INT (11)=NQ(11) 

NF=NF +1 

GO TO 32 

36 IF (NF) 50, 50, 38, 

38J=J+1 

NFAC (J) = NPR (J) 

NBR (J) = NF 

NRT = NROOT (INT, 1, 20) 

50 CONTINUE 

51 IF (J) 70, 70, 60 

60 WRITE (3, 61) (N (K), K = M, 20) 
61 FORMAT (1 HO, 1011) 

WRITE (3, 62) (NFAC (K)), 
NBR(K),K=1, J 

62 FORMAT (1H +, 10 X, 3H =, 9 (15, 1H (j 12, 1H) )) 
CALL PTS (NFAC, J, NBP, NPH 1, NTAU, N SIG, NDP, NDS, O) 
IF (L = 20), 66, 64, 66 

64 IF (INT (20) = 1) 75, 75, 66 


71 


| 
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i 66 WRITE (3, 67) (INT (K), K = L, 20) 
i 67 FORMAT (1H, 15 X, 1011) 


K=1 
GO TO 73 
70 WRITE (3, 71) (N (K), K = M, 20) 
71 FORMAT (1 HO, 1011) 
WRITE (3, 72) 
72 FORMAT ( 1H +, 13 X, BHIS PRIME) 
K=-l 
73 DO 741A = 1, 10 
74 NFAC (IA) = INT (IA + 10) 
NBR (1) =1 
CALL PTS (NFAC, 1 , NBR, NPHI, NTAU, NSIG, NDP, NDS, K ) 
75 WRITE (3, 76) (N PHI (K), K = NDP, 10) 
76 FORMAT ( 1H, 5X, 6HTAV=, 15) 
77 WRITE (3, 78) (NSIG (K), K = NDS, 10) 
78 FORMAT (1H, 5X, SHSIGMA =, 1011) 
GOTO 15 
80  CALLEXIT 
END 
RESULT 
405769 = 7 (4) 13 (2) 
PH 1 = 321048 
TAU = 15 
SIGMA = 46448640 
13123110 =2 (1) 3 (1) 5 (1) 7 (2) 11 (1) 13 (1) 19 (1) 23 (1) 
PH 1 = 228 0969 
TAU = 256 
SIGMA = 46448640 
18061 IS PRIME 
PH 1 = 18060 
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TAU =2 

SIGMA = 18062 

62742247 IS PRIME 

PHI = 62742246 

TAU =2 

SIGMA = 62742248 

62742255 = 3 (1) 5 (1) 599 (1) 6983 (1) 
PH1 = 33401888 

TAU = 16 

SIGMA = 100569600 

N = 62742267 = 3(2) 7(1) 995909(1) 
= 35852688 

TAU = 12 

SIGMA = 103574640 


EXERCISES 
. Evaluate : (i) o (5186), (ii) @ (56800), 


(iii) (7208) , (iv) @ (640412), (v) @ (628), 
(vi) (1001). 


. If forn> 1, @ (a) | n-1, prove that n is square free. 


73 


. Prove that p(n) p(n+1) p(n+2) p(n+3) = 0 for each positive integer 


n. 


. Ifn= 0 p:’ prove that 

(i) z w(k) d(k) = C1. 

(ii) = p(d) o(d) = (-1)" py P2 ---- Pre 
(iii) P [n(d)| =2". 


. Prove that © 1/d=0(n)/n for each integer n> 1. 
din 


. Prove that 


(i) d(n) is odd if and only if n is a perfect square , 
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(ii) 
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(ii) o(n) is odd if and only if n is a perfect square or twice a perfect 
square . 


Prove that > (d(k))3 =( d(k))? for each integer n> 1. 
kin kin 


For any integer n, show that 


() y o(k)= 5 (ak) d(k) and 
Kin kin 


(ti) & (n/kjo(k) = 5 kd(k). 
kin kin 


For k 2 2 show that 


(i) If 2*~1 is prime then 2*-! (2-1) satisfies the equation o(n) = 
2n. 


If 2_3 is prime, then n= 2"! (2k_3) satisfies the equacion o(n) = 2n 
+2. 


Prove that: 
(i) If n is an even integer then @(2n) = 2 (n) 
(zi) @(3n) = 3e(n) if and only if 3)n. 


(iii) @(n) = e(n+2) is satisfied by n=2 (2p-1) whenever p and 2p-1 
are both odd prime. 


. Prove that if alb then @(a)|p(b). 


Prove that if n is a perfect number i. e. o(n) = 2n then i. i/d=2"". 
in 
Prove that > y(d)p(d)= I (2-p). 
din pin 


Prove that it u(d) =u(n). 


d*in 


. Show that p(n) = n-1 if and only if n is prime. 


Find all values of n for which p(n) = 6. 


ooo 


CONGRUENCES 


3.1. DEFINITION AND BASIC PROPERTIES OF 
CONGRUENCES. 


Gauss in his great work, the “Disquisitiones Arithmaticae” in 1801 intro- 
duced a remarkable notation and basic facts which simplifies many problems 
concerning divisibility of integers. In doing so he created a new branch of 
number theory called the theory of congruences which is discussed in this 
chapter. 


DEFINITION : Given integers a, b, m with m > 0, we say that a is 
congruent to b modulo m, and we write 


qd) a =b(mod m), 


if m divides the difference a — b. The number m is called the modulus of 
the congruence . 


In other words, the congruence (1) is equivalent to the divisibility relation 


m|a-—b. 
In particular, a=0(modm)@m|la. 
Hence a=b(modm)@ a-—b =0(modm). 
We write a¥ b (mod m) if m +(a—b) 


and we say a and b are incongruent modulo m. 


Congruences are of great practical importance in everyday life. For ex- 
ample today is ‘Thursday’ is a congruence property (modulo 7) of the number 
of days that have passed since some fixed date. Lecture lists or railway guides 
are table of congruences, in the lecture list the relevant moduli are 365, 
7 and 24. 


Example 1 : Suppose that a lecture is given on every alternate date 
(including sundays), and that the first lecture occurs on a Monday. When will a 
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lecture first fall on a Tuesday ? If this lecture is (x41) then 2x = 1 (mod 7) 
and we find by trial the least positive solution is x = 4. 


Thus the fifth lecture will fall on a Tuesday and this will be the first that 
will do so. 


Example 2 : Consider x=] (mod 8). 
We can find by trial the solutions which are x = 1, 3, 5, 7 (mod 8). 


The congruence is also called as modular arithmetic. So modular arith- 
metic or congruence is finite. Many interesting problems on divisibility, 
remainder which when divided by an integer can be carried out with the help 
of congruence. 


BASIC PROPETIES OF CONGRUENCES 


THEOREM 1 : Congruence ‘=’ is an equivalence relation. That is we 
have 


(a) a=a(mod m) (Reflexivity). 

(b) a=b(modm)=>b=a (mod m) (Symmetry) 

(c) a=b (mod m) and b =c (mod m) 

=>. a=c (mod m) (Transitivity). 
PROOF : 


(a) follows since mla—a=0. 

(b) follow from the fact that if m|(a—b) then m | (b—a) 

(c) Ifm|(a—b) and m| (b-c) then m | (a—b) + (b-c) = ac (divisibility 

property). 
THEOREM 2 : If a=b (mod m) and a = B (mod m), then we have 

(a) ax + ay =bx + By (mod m) for all integers x and y 

(b) aa=bB (mod m) 

(c) a" =b" (mod m) for every positive integer n. 

(d) f (a) =f (b) (mod m) for every polynomial f with integer co— 
efficients. 

(e) Ifd|m,d|athend |b. 

() (a, m) = (b, m). 

(g) Ifa=b(modm) and a=b(modn) where (m,n) = 1 thena=b(mod 
mn). 
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PROOF: (a) Since m | (a-b) and m| (a—B) we have 
m| x (a-b) + y (a —B) = (ax + ay ) — (bx + By) . 

(b) aa—bB= a (ab) + b(@—-B) = 0 (mod m) by (a). 

(c) Take a=aand B=b in (b) and using induction on n we get (c). 

(d) Using (c) and induction on the degree of f we get (d). 

(e) Assume that d > 0. Ifd|m then a=b (mod m). 

But if d | a then a=0 (mod m) so b = 0 (mod m). 

(f) Let d; =(a, m) and dz =(b, m). Then d; | m and d; | a so dy |b; hence 
d; | do. Similarly dy | m, dj | m implied d | a; hence dp | dy. 
Therefore dj = dy i.e. (a, m) = (b, m). 

(g) Since both m and n divide a—b so does their product mn since (m, 
n) = 1. Hence proved.. 


Example 3 : An integer is divisible by 9 if and only if, the sum of its 
digits in its decimal representation is divisible by 9. 


Suppose n =a) + 10a; +107 a)+..... + 10* ax. 
10 =1 (mod 9) 10?=1....... 10K = 1 (mod 9) 10k a, 
= | (mod 9) 
fork. =O, 1,.2,...k 
So 
N =a) +a; + ay+..... + a, (mod 9) 


Since 3 | 9 an integer is divisible by 3 if and only if, the sum of its digit in 
its decimal representation is divisible by 3. 


Example 4: An integer is divisible by 4 if and only if the difference 
between the sum of digits in the odd places and the sum of digits in the even 
place is divisible by 11. 


Suppose N =a + 10a; + 107a9 + 10°a3 +... + 10%a, 
1 =1(mod11) => a,=a, (mod 11) 
10 =-1 (mod 11) = 10a; =—a; (mod 11) 
10? =1 (mod 11) => 10% ay =a (mod 11) 
10? =-1 (mod 11) => 103 a; =~a3 (mod 11) 
10 =+ 1 (mod 11) if k is even 
10K =-1 (mod 11) if k is odd . 
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Thus a) + 10 a, + ... +108 a = (ag tag +aqt.....)— (ay +azt...) 
= (mod 11) 


So n is divisible by 11 if 
(ag + agt....+ ay 1) — (ay + a3 +...+.a,) = 0 (mod 11). 


Example 5 : We have shown in the Chapter I that Fs is composite and 
divisible by 641. 


Here with the help of congruence we will show it. 


5 
Fs =27 +1=23241. 


Now 2 = 4,24 = 16, 28 = 256, 2'%= 65,536 = 154 (mod 
641). 
So 232 = (154)? = 23, 716 

= 640 (mod 641) 

=~] (mod 641). 
Therefore, Fs = 23? +1 =0 (mod 641), so Fs is composite. 
Example 6 : What is the remainder when 5°° is divided by 12 ? 
Now, 548 (52)24 = (25)?4 = (1)24 (mod 12) 

= 1 (mod 12). 


Hence the remainder is 1. 

Example 7 : Find the remainder when 1! +2!+3!+.....+200! is divided 
by 4. 
1! +2! 4+ 3l+...... + 200! 
1! + 2! + 3! (mod 4) (since k! is divisible by 4) 
1+2+6=1 (mod 4) fork >4 


Hence the remainder is | . 


WM 


Example 8 : Determine the remainder when 2°° is divided by 11. 


Solution : 2!! =2 (mod 11) 
=> (2'1)3 = 23(mod 11) 
936 _ 933.93 


= 23.23 (mod 11) 
= 64 (mod 11) =9 (mod 11). 
Hence the remainder is 9. 
Exercise 


; Foie 9 
1. Find the last two digits of the number 9? . 
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Example 9 : Find the remainder when 2!4 is divided by 17. 
24 =-1 (mod 17) => 28 =1 (mod 17). Again 2° 
= 64 = 13 (mod 17) 
2'4 = 28. 26 = 64 (mod 17) = 13 (mod 17). 
Congruence is like equality ‘=’ in arithmetic. All the properties of addi- 


tion, subtraction, multiplication are true for congruence as shown in theorem 2 
_ . But the division is not always true for congruence. For example 


18 =8 (mod 10) > 9 #4 (mod 10) since 10 + (9-4) =5 
Example 10 : (a) Find the remainder when 2>° and 41® are divided by 7. 
(b) What is the remainder when the sum (eRe) +99> + 100° 
is divisible by 4? 
Solution : 
(a) 23 = 1 (mod 7), 22 =4 (mod 7) 
These two imply P=ad (mod 7), 210 = 42 (mod 7) = 2 (mod 7) 
Hence 250 = 2° (mod 7) = 4 (mod 7). 
Hence the remainder is 4. 
Again 41 = (-1) (mod 7) > (41)© = (-1)® (mod 7) 
= —1 (mod 7) 
6 (mod 7). 
The remainder is 6. 


Ul 


| 


1 = 1 (mod 4) > 15 = 15 (mod 4) 2° = 0 (mod 4) 
3 =-1 (mod 4) => 3° =(-1)° (mod 4) 
49 =0 (mod 4) ..... 100 =0 (mod 4). 


All the even powers are divisible by 4. The odd terms are congruent to 
either 1 or—1 modulo 4 . Hence 


154+254354....4+995+100° = 154(-1)° (mod 4) 
= (1-1) (mod 4) 
=0 (mod 4). 
Example 11 : 22225555 + 5555222 is divisible by 7. 
We know 
2222 =3 (mod 7) 
and 5555 =4 (mod 7). 
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5555 =5 (mod 6) 
2222 =2(mod 6). 
Thus 2222/5555 4 55552222 =.35 4.42 
12 + 2 (mod 7) 
0 (mod 7). 
Example 12 : Using congruence we can also show that 
(i) 13] 3"*2 4 42m*1 (iz) 43, | M2 4 72041 
Example13 : Show that 41 | 220-1. 
2° = -9(mod 41) = (25)* = (-9)4 (mod 41) 
=> 2°0 = 81.81 (mod 41) But 81 =-1 (mod 41) . 
Hence 279-1 =81.81-1= 1-1 =0 (mod 41). 


In the following theorem we will show when this cancellation law is true 
for congruence. We show that a common factor can be cancelled if the modu- 
lus is also divisible by this factor. 


THEOREM 3: If c > 0 then a=b (mod m) if and only if 
ac = be (mod me). 


PROOF : We have m | (b-a) if and only if mele (b-a), i. e. ac = be (mod 
mc) 


THEOREM 4: (Cancellation law) If ac = be (mod m ) and if d =(m, c), 
then 


a =b (mod m/d) 
If d =1 we get 
a =b (mod m). 


That is, we can cancel the common factor which is relatively prime to the 
modulus . 


PROOF : Since ac = be (mod m) we have 

m|c (a-b) > m/d|c/d (a—b) 
But(m,c)=d = (m/d, c/d) = 1. Hence by Euclid’s lemma m/d | (a—b) i.e. 
a =b (mod m/d). Hence proved. 


3.2. RESIDUE CLASSES AND COMPLETE RESIDUE SYSTEM 


DEFINITION : Consider a fixed modulus m > 0. We denote by 4 the set 
of integers x such that x = a (mod m) 
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ie. 2 ={x:x isan integer and x =a (mod m)}. 


j We call a the residue class a modulo m. Thus 4 consists of all integers 
_ of the form a+mk,k =0,+1, +2... The following property is satisfied by the 
_ residue classes. 


Example: 6, j, 3, ...§ are the residue classes modulo 10. 

THEOREM 5: Fora given modulus m we have 

(a) 4 =6, if and only if, a=b (mod m) 

(b) Two integer x and y are in the same residue class if and only if x= 
y (mod m) 

(c) The m residue classes i, 3...in are disjoint and their union is the set 
of all integers. 

PROOF : 


(a) a = b > x =a(mod m) = b (mod m) & a=b (mod m) 

(b)  x=y(mod m) @x=9 by (a). Hence two integers x and y are in the 
same residue classes. 

(c) To prove (c) we note that the numbers 0, 1, 2, ... m-1 are incongru- 
ent module m. Hence the residue classes 6, {... fl are disjoint. 
But every integer x must be in exactly one of these classes because 
x= qm +r where 0 <r<m, sox =r (mod m) and hence x € ?, 
Since 0 = mthis proves (c). 

DEFINITION : A set of m representative one from each of the residue 


classes ih ...th is called a COMPLETE RESIDUE SYSTEM modulo m. We 
write in short as CRS modulo m. 


Example : (i) {0, 1, 2,3, 4, 5, 6, 7, 8, 9, 10} is a CRS (mod 11). 
(ii) { 1, m+2, 2m+3, 3m+4, ...... m?} 


Ag Sa m-1}, { 1,2,3,....m} are the set m integers, incogruent 
module m are CRS modulo m. 


3.3. REDUCED RESIDUE SYSTEM AND FERMAT’S 
THEOREM 


DEFINITION: The set of ~(m) integers incongruent modulo m, each of 
which is relatively prime to m is a REDUCED RESIDUE SYSTEM modulo 
m. We write in short RRS modulo m. 
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Example 1: If m= 8 then 
{ 1, 3, 5, 7 } form the RRS modulo 8. 
Also { 9, 11, 13, 15 } form RRS modulo 8. 


THEOREM 6: Assume (k, m) = 1 .If { a; a2... a} is complete residue 
system modulo m, so is { k ay, k ag.... k am}. 


PROOF : We will show that the elements of the set {ka), kap....ka,,} are 
distinct and mutually incongruent modulo m. Suppose they are not, then ka; = 
ka; (mod m) since (k,m)=1 by cancellation law a; = aj (mod m) which is not true 
by the hypothesis that { aj, az ... an} isa CRS mod m. Therefore two ele- 
ments in the set {ka,, ka2....ka} are mutually incongruent modulo m. Since 
there are m elements in this set it forms a CRS modulo m. 


THEOREM 7 : Assume (k, m) = 1. If {aj, az-... Ag@my } is a reduced 
residue system modulo m, then {kaj, kag... kag) } 18 also a reduced residue 
system modulo m.. 


PROOF : Since { aj, a2 ...Ag(m) } is a RRS modulo m by definition (a; 
'm)= 1 fori= 1,2, ...¢e(n). It is given that (k, m) = 1. These two imply (kaj, m) 
= |. That is each ka;, i= 1, 2... is relatively prime to m. 


So there are @(m) in number. 
Now kaj = ka; (mod m), (k,m) = | 
=> a; = a; (mod m) which is false since {aj, a,...ag(m) } runs 
through a RRS modulo m . Hence {kaj, kag, .... kagymy } also forms a RRS 
modulo m. 
THEOREM 8: (Fermat’s Little Theorem ) 
For any integer a and any prime p we have 
a? = a (mod p). 
This will follow from the generalised version called Euler Fermat theo- 
rem. 
THEOREM 9: (Euler Fermat-theorem) 
Assume (a, m) = 1. Then we have a®™ = | (mod m). 
PROOF : Let { bj, bz ... byym) } be a reduced residue system modulo m, 
Then {abj, ab2...abgim) } is also a reduced residue system modulo m. Hence 


the product of all the integer in the first set is congruent to the product of those 
in the second set. Therefore 
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b, by eee bom) = ab), ab eae abocm) 
Sarl) bBo ih bom) (mod m). 

Since each b; is relatively prime to m (b;, m) = 1 for i = 1, 2... (m) 

sanceling each b; we get a%(™) = 1 (mod m). 


yal 


Corollary 1 : If a prime p does nof divide a then a?-! = | (mod m). 
Taking m= p, 9(m) =9(p) = p—l, and (a, p) =1, hence the result follows 
from theorem 9. ; 


PROOF OF THEOREM 8 : If a is any integer and p is any prime then 
IO cases arise. 


Either p | a or p+a. In the case when p|a 

4 we get p | aP hence p | aP—a, i ¢ aP—a = 0 (mod p). 

Or aP = a (mod p). 

* Inthe second case when p /ai.e. (a, p) =1 then by the corollary 
we get a?! = | (mod p). 

’ Multiplying by a both sides since (a, p) = 1, we get a? =a (mod p). 


» Thus theorem 8 is proved.. 


i 


_ SECOND PROOF OF THEOREM 8: The proof is by induction ona. 
|= 1 then 1P= 1 (mod p) is true as is the case a= 0. Assume the result hoid 
4, we will show it is true for a+1. that is to show that (a+1)P =(a+1) mod p 
n aP =a (mod p). 


Now, by binomial theorem 


Gasp =aP +(4) aP Warheie (") or 4( 9?) atl. 


By assumption a? = a mod p. 

We have to show that the binomial coefficients (2) given by 
(2) = pl/k\(p-1)! is divisible by p for k= 1,2.... p-1. 

at is to show that 


(?) =0 (mod p). 


84 Congruences 
Now k! (2) = pl(p-k)! =p (p-1)... (p-k+1) = 0 (mod p), 


which implies either p|k! or p| (2) . But p|k! isimpossible since I< k 


<p-l. 


Hence p | (2) AG: (2) =0 (mod p). 


Hence we have 
(a+1)P = aP+ 1 =(at+1) (mod p). 
Hence the theorem follows when a > 0. If a is negative integer, there is no 
problem since a= r (mod p) for some r, where 0 < r<p-l. 
We get aP =r? =r =a (mod p). 
THEOREM 10: If p is prime, then (xty+...tw)P = xP + yP +... +wp 
(mod p). 


PROOF : (x+y)? = xP + (") xP ly ++ [ 2 xyP-! ¢yP = xP + yP 


P 
(mod p), 


since (2) ,k=1, 2,3... p-1 is divisible by p, 


the general result follows by the repetition of the argument . 
Corollary 2 : a? = a (mod p ) (Little Fermat’s theorem). 


By taking x = y=z=....=w =I in theorem [1 if there are a number we get 
(1+1+...+a)P = 1P + 1? ... toa (mod p) 
=: aP =a (mod p). 


THEOREM 11: If a>Oand m=1 (mod p%) 
then mP = 1 (mod p%*!) 
PROOF: m=! (mod p*) > 
m=1+kp%,k isan integer,andap 2a+1. 
Hence 


Coal | 


mP = (1 + kp%)P = 1 +/ p*”™’ where / is an integer. 


Corollary 3: aP(?!)= 1 (mod p?), 


(a 


2 S 
aPP-) = 1 (mod p?), aP PD estanod p?) 


eS et, ee eae ee 


—— 
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Taking m =a?! in theorem 11 we have aP-! = 1 (mod p) then we get 
aP(P-!) = 1 (mod p2). Again taking m= a?) anda =2 we get 


are) = 1 (mod p*) and so on. Hence proved . 
Example 1: 11 | 53° — 4. 
By Fermat’s theorem 5!° = 1 (mod 11) since (5,11) = 1. 
Now 538 = 510x348 — (510)3 (52)4 
= 1. (25)! = 1.34=81=4 (mod 11). 
Since 25 =3 (mod 11) 
Hence 11 | 5°84. 
Example 2 : Find the unit digit of 3100 by Femat’s theorem. 
Fermat’s theorem gives 34 = 1 (mod 5), 34 = 1 (mod 2). 
These two => 3t=1 (mod 10) 
=> 31901 (mod 10) 
=> listhe unit digit in 31°, 
Example 3 : Find the last two digits of Bi00! 
Since (3, 100) =1, 39) = 1 (mod 100) 
But (100) = 40 . We have 
349 = 1 (mod 100) 
3100 — 340.2 +20 _ (340)2 320 
= 320 (mod 100) 
= (3°) (mod 100) 
= (43)* (mod 100) = (1849) (mod 100) . 
= (49)* (mod 100) 
= 01 (mod 100). 
Example 4 ; Determine the last two digits of 19991999, 
We need congruence 19991999 (mod 100). 
(100) = 9(25) e(4) = 40. 
1999 = 40k+39, 1999 = 99 (mod 100) 
19994 = 1 (mod 100) (By Euler’s—Fermat’s theorem) 
199940K = 1 (mod 100). 
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Hence 19994°*39 = (99)39 (mod 100). 
(By Euler—Fermat theorem) 9940 = 1 (mod 100). 
To find (99)°? (mod 100) , 
99 =~-1 (mod 100) 
Hence (99)3? =(-1)39 (mod 100) 
=~1 (mod 100 ) = 99 (mod 100) 
That is, the last two digits are 99. 
Example 5 : Find the last two digits of N = 123456, 
Solution: 123 = 23 (mod 100). We know a"*! = (a") 2 
Wehave 456 = 256 +128 + 64+8. 
123 = 23 (mod 100) 
(123)? = 23? =529 = 29 (mod 100) 
(123)4 = 29? =41 (mod 100) 
(123)8 = 41? =81 (mod 100) 
(123)!6 = 812 =61 (mod 100) 
(123)? = 61? =21 (mod 100) 
(123) = 21? =41 (mod 100) 
(123)!28 = 412 =81 (mod 100) 
(123)25 = 812 =61 (mod 100). 
Therefore 12346 = 123256+128+6448 — 6], 81.41. 81 = 16409061 = 61 
(mod 100) 
Exercise : Determine the remainder when 27° is divided by 225. 


We can use for Euler—Fermat theorem to find the inverse of a mod m, we 
define the inverse of a mod m as: g 


Let m be a fixed integer. The arithmetic inverse of a given integer a such 
that (a, m) = | is an integer a® such that aa” = 1 (mod m). 


The integer a’ is called as inverse of a mod m. 
Example 2 : If m= 10, the inverse of 3 is 7 since 3.7 =21 = 1 (mod 10). 


Since a®%™) = a,a%™-! = 1 (mod m), a%™-! js an inverse of a modulo m. 
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Example 3 : If m = 35, 9 (35) =9(7), 9(5) = 6.4= 24. Hence 274 
= | (mod 38). 


The inverse of 2 mod 35 must be 23 (mod 35). 
To calculate 23 (mod 35) 
26 =1 (mod 7) = 2!? = 1 (mod 7) 
24 =1 (mod 5) = 2!7 = 1 (mod 5) 
These two imply 2!2 = 1 (mod 35). 
223 = 2!2+1! Gnod 35) =2!! (mod 35) = 18 (mod 35) 


Hence the inverse of 2 mod 35 is 18. 
Exercise : Determine the inverse of 3 modulo 40. 


Example 4 : Express a>7 as a product of power of a where the exponents 
are powers of 2. 


We write 37 in base 2 as 37 = 324441 = 
= 125 4+0.24 +0,23 + 1.27+0.2+1.2° 
= 100101 in base 2. 


There fore a?” = a? a‘al. 


We describe an algorithm in which the base 2 expansion of k in ak is 
implicit. The idea is to traverse the digits of k (in base 2) from right to left. 
Every time we encounter a 0, divide k by 2 and square n, but do not add the 
term to the result. If k is odd, we multiply the result by the current power ofa 
and subtract | from 4. 


ALGORITHM (Exponential modulo m) Given integers, k and m this 
algorithm compute ak mod m fork >0. 


1. [Initialize ] set result = 1 
2. [Check if done]. If k = 0, return result and terminate . 


3. [kis odd]. If k mod 2= 1, then let result = (result a) mod m; k = k— 
1, and go to step 2. 


4. [kis even]. Leta= a2 mod m, k = k/2 and go to step ne 


Example 5 : Let k = 37, the values in the computation are as follows. 
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TABLE 
Iteration 
0 1 100101 
1 a 10000 
2) a 10010 
3 a 1001 
4 a 1000 
5 a> 100 
6 a? 10 
q a> 1 
8 a>? 0 


APPLICATION OF THE METHOD OF COMPUTING a“ MODm 


We will apply this method to determine if a number n is a prime power. If 
n= pk, Fermat’s theorem implies that a" = a (mod p), then d = (a"-a, n ) is 
divisible by p. If dis not prime then it is a power of prime we now check if d is 
a power of prime, if it is, then we can repeatedly divide n by this prime to see 
if n is a prime number. In the computation of d, it is sufficient to compute a"— 
a mod n. 


Suppose n =28561 and a= 2, aa mod n = 2" 2 (mod 28561) 
=4810, (4810, n) = 13. Hence n could be a power of 13. 


Repeatedly dividing n by 13 we have n = 13°. 
Example 6 : Find the last two digits in the decimal representation of 3256, 
Solution : To find 325° (mod 100). 
Now 9 (100) =40, 
349 = 1 (mod 100) 256 = 6 x 40 + 16 
3256 = 36x 40+16 — (3406 316 — 316 (mod 100) 
Now 3!6 =(81)4 = (-19)* = (361)? 
= (61)? = 21 (mod 100) . 


Now the guration is whether the converse of Fermat’s theorem is true or 
not . That is a" = 1 (mod n) implies n is a prime. This is not true. 
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_ For example if n = 117,a=2, we write 
2! Naas g7-16+5 my (2716 5 
and 27 = 128 =11 (mod 117), 
we have 27 = 44!6 95 =(121)8 25 =48 25 =2?! (mod 117) 
But 2! = (278 which gives 
271 2413 =121.11 =4.11 =44 (mod 117) 
We finally get 
2'17 = 44 # 2 (mod 117) 


so that 117 is composite and 117 = 13.9. The converse of Fermat’s theo- 
rem is not true. That is a"! = 1 (mod n) for some integer a then n need not be 
a prime. We will illustrate it by an example. For this we require the following 
lemma . 


LEMMA : If p and qare distinct primes such that a? =a (mod q).and a4 
=a(mod p), then aP4 =a (mod pq). 
PROOF: It is known from Fermat’s theorem (a9)P = a4 (mod p) while a4 
=a (mod p) by hypothesis . Combining these two we get aPd =a (mod p) 
or plaPd-a. 
Similarly q | a?4—a. This yields pq | a?‘—a which we write aP4 =a (mod 
pq). 
Example : We will now show that 2340 =] (mod 341) where 341 = 
4 11.31, a composite number. 

2!0 = 1024 =31.33+ 1. Thus 2!! 


=2.2!0 =2.1 =2 (mod 31) 


and 23! = 2 (2!%)3 22.13 =2 (mod 11) 
By the lemma, 2!! 231 = 2 (mod 11.31) sil} 
or 2341 = 2 (mod 341). 


After canceling common factor 2 we get 2340 = | (mod 341) 


So that the converse of Fermat’s theorem fails . 


3.4. LINEAR CONGRUENCES 


Polynomial congruences are analogous to the polynomial equation in al- 
gebra. We consider the polynomial with integer coefficients so that the values 
of these polynomial will be integers when x is an integer. Consider f (x) = 0 
(mod m) , x, m integers . Then x is called as a solution of the congruence. By 
the properties of congruence if x = y (mod m) then f (x) = f (y) (mod m). So 
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every congruence having one solution has infinitely many solutions, we will 
consider solutions which are distinct and incongruent modulo m. So the num- 
ber of solution are contained in the set {1, 2, ... m} or any other complete 
residue system modulo m . Soit is expected as in case of polynomial in algebra 
that every polynomial congruence modulo m has at most m solution, But it is 
not always true . There are some polynomial congruence which has no solu- 
tion. A polynomial congruence of degree one is called as linear congruence. 


Example : The linear congruence 2x = 3 (mod 4) and 2x = 1 (mod 2) 
have no solution, since 2x —3 is odd for every x and can not be divisible by 4. 
Similarly in other case 2x-1 is odd and can not be divisible by 2. 


Example : A quadratic congruence x2 = 1 (mod 8) has exactly four 
solutions i.e. has more solution than the degree of the polynomial congruence 
i.e. 2, The solutions are givenby x= 1, 3,5, 7 (mod 8). 


We will consider now linear congruences, we will see when it has exactly 
one solution, what is the condition that it must have solution and what is total 
number of solutions and how to find these solutions. 


THEOREM 12 : Assume (a, m) = 1. Then the linear congruence 
(2)ax =b (mod m) has exactly one solution. 


PROOF: As the distinct incongruent solution modulo m are among the 
CRS mod m, we test the numbers 1, 2,...m . Now form the product with a i.e. 
a, 2a.,... ma. Since (a, m) = 1 by theorem 6 these numbers also constitute 
a CRS modulo m. That is there is one x satisfying (2) i.e. ax =b (mod m). 

Hence proved . 


This theorem tells us the existence of exactly one solution but it does not 
say anything about how to determine this solution. If (a, m) = 1 then the unique 
solution of the congruence ax = 1 (mod m) is the reciprocal of a mod m. About 
the reciprocal we have already studied in the section 3.3. 


To see the necessary and sufficient condition for the congruence (2) has 
solutions, 


THEOREM 13 : Assume (a, m) = d . Then the linear congruence (2) 
has solution if, and only if,d|b. 


PROOF : If a solution of linear congruence (2) exists then (a, m) = d. 
implies d | m and dja. Hence d| ax—my = bie. d|b. 
Conversely dividing the congruence (2) ax =b (mod m) byd, 
we get 
Wy) a/d x = b/d (mod m/d) and r tt 
(a,m) =d = (a/d, m/d) = 1. 
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Therefore by theorem 12 congruence (3) has exactly one solution which 
is also a solution of (2). 
Example : 2x = 3 (mod 4) has no solution because (2,4) = 2 and 2 avd. 


THEOREM 14: Assume (a, m ) = d and suppose that d | b. Then the 
linear congruence (2) has exactly d solutions modulo m. These are given by 


(4) t, t+ m/d, t+ 2 m/d, ... t+ (d-1) m/d, 


where t is the solution unique modulo m/d, of the linear congruence (2). 


PROOF : A solution of (3) is a solution of (2) since if x satisfies (3) 
i.e. a/d x = b/d (mod m/d) then multiplying through out by d, 
we get ax =b (mod m) i.e. (2) is satisfied conversely if (2) is satis- 
fied then (3) is satisfied. That is if x satisfies. 
ax =b (mod m) 
and since (a, m) = d, dividing by d we get a/d x = b/d (mod m/d) ie. (3) 
is satisfied . 


Now the d number of solution given in the set (4) are of the solution of (3) 
hence of (2). No two of these are congruent modulo m since the relation. 


t+rm/d = t+s m/d(modm), 
with 0 <r <d,0 < 5s <d. imply 
rm/d =s m/d (mod m) 

and hence, 

t =s (mod d) i.e. d| rs but |r-s| <dsor=s. 

Next to show that the linear congruence (2) has no solution except those 
listed in (4). If y is a solution of (2) then ay = at (mod m) so y =t (mod m/d) 
by cancellation law. That is y = t + km/d for some integer k. But k =r (mod d) 
for some r satisfying 0 <r<d. Therefore 


k m/d =r m/d (mod m). 
So y =t+rm/d (mod m). 


Therefore y is congruent modulo m to one of the number in the set (4). 
This completes the proof. 


Now we will establish a theorem for determining all solution of the linear 
congruence. For this we use Euler—Fermat theorem. 


THEOREM 15 : If (a, m) = 1 the solution (unique mod m) of the linear 


‘congruence 


, 
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(5) ax =b (mod m) is given by 
(6) x =ba%™-! (mod m). 


PROOF : The number x given by (6) satisfies (5) because 
ax= a.ba%™! (mod m) 
= ba? (mod m) 
= b (mod m) 
by Euler~ Fermat theorem. Since (a, m) = I the solution is unique mod m. 
If (a, m) =d we get d number of solution t=k m/d, k = 0, 1,2, 3... (d—1) and 
tis given by (6). We illustrate these by examples. 
Example 1 : Solve the congruence 3x =5 (mod 20). 


Solution : Since the gc d (3, 20) = 1. there is unique solution mod 20. 
By (5) the solution is 


x =5.3929F! = 5 37 (mod 20) 


But 34 = 1 (mod 20) 

and 37 =33 (mod 20) 

so x =5.33 (mod20) 
=5 x 27 (mod 20) 
= 15 (mod 20). 


The solution is 15 (mod 20). 
Example 2: Solve 27x= 45 (mod 180) . 
Solution : Since d = (27, 180) =9, and 9 | 45, 
so the congruence has 9 solution modulo 180. 
Dividing by 9 we get 
3x =5 (mod 20), which has solution Lo. 
The solutions are given by 


x = 15 + 20k, k =0, 1, 2, 3, 4, 5, 6, 7,8 


They are 
x = 15, 35, 55, 75, 95, 115, 135, 155, 175, (mod 
180), : 
Example 3 : Solve the linear congruence 9x = 12 (mod 15). 
Solution : d= (9,15)=3 
The linear congruence has solution since 3 | 12 and it has 3 solutions. 
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Dividing the congruence by 3 we get 
3x =4 (mod 5). 
The solution of this linear congruence is 
x =4.30)! (mod 5) = 4.35 (mod 5) =3 (mod 5). 
Hence the solution of the given linear congruence are 
3+ 5k,k =0, 1, 2. ice. are 3, 8, 13 (mod 15). 


3.5, POLYNOMIAL CONGRUENCES MODULO p, LAGRAN- 
GE’S THEOREM : 


The fundamental theorem of algebra states that every polynomial f(x) of 
degree n = 1 the equation f(x) = 0 has n solution. There is no direct analog of 
this theorem for polynomial congruences. We have already shown in examples 
that some linear congruences have no solutions, some have exactly one solu- 
tion and some have more than one. However, for congruences modulo a prime 
p we have the following theorem which guarantees p number of solutions of 
the congruence f(x) =0 (mod p). 

THEOREM 16 : (Lagrange) 

Let f(x) = co +¢) X +...-+¢, x" be a polynomial of degree n with integer 
coefficients such that c, # 0 (mod p) , p is a prime. Then the polynomial con- 
gruence 

(7) f(x) = 0 (mod p) 

has at most n solutions. 

PROOF : We use the induction on n, the degree of f. When n = I the 
congruence is linear c)X + Cy = 0 (mod p). 

Since c, 0 (mod p) i.e. (c), p) = |, it has exactly one solution. Assume 
that the theorem is true for polynomials of degree n — 1. Suppose that the 
equation (7) has n+ i incongruent solution modulo p, say Xo, X1 --- Xn - 1€ F(X) 
= 0 (mod p) for each k = 0, 1,.... n. 

Now £(x) — f(Xg) = Co + C/K Hee ek Cy XY 

Adiibiepixg Hse. # eh tegh) 
= Cy (X—Xq) #.---+ Cy (X"=XQ") 
= (X-Xo) g (x), 

where g (x) is a polynomial of degree n—! with integer coefficients. By 

our assumption g (x) has (n—1) solutions. Thus 
£(X}) — (Xo) = OXk — Xo) F%,) = 0 (mod p) 
since £(x,) = f(Xo) = 0 (mod p). 
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But Xk—Xq = 0 (mod p) if k +0. 
So we must have g(x;) = 0 (mod p) for each k 40. 


That is g(x) =0 (mod p) has n incongruent solutions modulo pcontradict- 
ing our induction hypothesis. This completes the proof. 


Remark : The theorem fails if we replace prime modulo p by a composite 
modulo m. For example x =1 (mod 8) has four solution 1, 3, 5, 7, instead of 
two solutions. 


3.6. APPLICATION OF LAGRANGE’S THEOREM : 
We will describe here some applications of Lagrange’s Theorem. 


THEOREM 17: If f (x) =co +c) x+....+ cy x” is a polynomial of degree 
n with integer coefficients and if the congruence f(x) = 0 (mod p) has more 
than n solution, where p is prime, then every coefficient of f is divisible by p- 


PROOF : Suppose the theorem is not true. Let c, be the one coefficient 
with largest index which is not divisible by p i.e. p+ cy. k < n. Then the 
congruence 


Cy +0, X +...4 c xk = 0 (mod p) 


has more than k solution. So, by Largrange’s theorem p +c, which is a 
contradiction. Hence all the coefficients of f(x) are divisible by p. Hence proved, 


THEOREM 18 : For any prime p all the coefficients of the polynomial 

f(x) = (x-1) (x-2).... (k-p +1) — xP! + 1 are divisible by p. 
PROOF : Let g(x) = (x—1) (x-2) ... (x-p+1) and h (x) 

= xP! _ |. Then f(x) = g(x) —h(x). 
The roots of g(x) are 1,2...p—1. 
Hence g(x) satisfied the congruence g(x) = 0 (mod p). 
Now by Euler—Fermat theorem 

xP! = 1 (mod p) => xP-!-1 =0 (mod p). 
That is h (x) = 0 (mod p). It has p—1 roots. 


Now f(x) = g (x) h(x) =0 (mod p). 
By Lagrange’s theorem it must have the p-1 number of solutions. 
But f(x) = (X-1) (x-2)....(x—p+1)— xP} +1 


= xPLh cy xP? (p-) | — x Ply 
= f,(x), 
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where f(x) is a polynomial of degree p—2 so f(x) is a polynomial of de- 
gree p—2 having p—1 roots implies by theorem 18 that all its coefficients are 
divisible by p. 


THEOREM 19: (Wilson’s theorem) For any prime p we have 

(p-1)! + 1 =0 (mod p) or (p-1) ! =—1 (mod p). 
PROOF: Let f(x) = (x=1) (x-2) ..... (X-pt1) — xP! 41 
On expanding f(x) we get 

£(K)= xP1 Hep xP 24 Fey xt cy — APN + 1 
where cp_; +1 is the constant term of f(x) that is c)_; + 1 =(p-1)! +1. 
Since by theorem 18 all the coefficients of f(x) are divisible by p, hence 
Cpt] =(p-1)! + 1 =0 (mod p) 
bee (p-1)! =-—1 (mod p) 
which proves Wilson’s theorem. 
SECOND PROOF OF WILSON’S THEOREM : We can prove this 
theorem without using Lagrange’s theorem. 


If p =2 and p=3 the theorem is trivial. Since 1! + 1 = 0 (mod 2) and 
2! + 1 =0 (mod 3) let us take p > 3. Suppose that a is any one of the p—1 
positive integers, 


1,2,3, ... p-l 
and consider the linear congruence ax = | (mod p). 


Then ged (a, p) = 1. Hence the linear congruence has unique solution 
modulo p; hence there is a unique integer a*, with 1 <a* <p —1, satisfying 


aa* =1 (mod p). 

Since p is prime a = a* if and only if a= 1 or a = p-l. The 

congruence ; 
a* = 1 (mod p) © (a-1) (atl) = 0 (mod p). 

Therefore either a—1=0 (mod p) in which case a= 1 or a+ 1 =0 (mod 
p) in which case a= p—1,If we will consider a =1 and a = p—1 and group the 
remaining integers 2,3, .. p—2 into pairs a, a’ where a# a’ such that aa’ = 1 (mod 
p). There are p -3/2 congruences are multiplied together and rearranged we get 


2.3 .... (p-2 ) = 1 (mod p) 
=> (p-2)! = | (mod p). 
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Multiplying by p-1 we get 
(p-1) (p-2)! = (p-1)! = p-1 =-I (mod p) 
i.e. (p—1)! =-1 (mod p) 
which proves Wilson’s theorem. 


CONVERSE OF WILSON’S THEOREM : 
The converse of Wilson’s theorem states that: If (n—1)! =—1 (mod n), 
then n is a prime. 


PROOF : If nis not prime, then n has a divisor d with 1< d <n. Since d 
<n-1,d occurs as one of the factors in (n—1)! whence d| (n—1)!. By hypothesis 
n|(n—-1)!+1 since d|n, these two together imply that d|(n—1)! + 1. 

But d|(n-1)! hence d| 1 which is not true. 

Remark : Wilson’s theorem and its converse theorem provide us with 
necessary and sufficient conditions for determining primality of an integer. We 
say that n > 1 is prime if and only if (n—1)! =—1 (mod n). We now apply 
Wilson’s theorem to study the quadratic congruences. ax? + bx +c =0 (mod n) 
with (a, n) = 1. 


THEOREM 20 : The quadratic congruences x? + 1 =0 (mod p) where p 
is a prime, has solutions if and only if p= 1 (mod 4) i.e. p=4k + 1, k= 1, 2, 
3 


PROOF : Let a be any solution of x74+1=0 (mod p), so that a? =-] (mod 

p). 
Since p | a, Fermat’s theorem gives 
i p-l p-l 

1 sah! sa’)? =(-1)? (modp). 

If p = 4k +3 then R.H.S is -1 and 

1 =-1 (mod p) > p|2 
which is impossible. Hence p can not be 4k + 3. 
Therefore p is of the form 4k + 1. 


Converse part 
Now 
(p-1)! = 1.2..... (p-1/2) (p+1/2) . . (p-2) (p-1) 
we have (p-1) =-1 (mod p) 
(p-2) =-2 (mod p) 
(p+1)/2 = (p—1)/2 (mod p) 
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Rearranging the factors, we get 

(p-1)! =1 Cl) (2)... (p-1)/2) (— (p-1)/2) (mod p) 

b=! 
= (-1) 2 (1.2... (p-1)/2) (mod p) 

since there are (p-1)/2 minus sign is involved. 
By Wilson’s theorem 

(p-1)! =-1 (mod p). 
Putting this value we get 


pol 
-1 =(-1) 2 [(p-1)/2 !}* (mod p). 
pol 
If p =4k+1 then(-1) 2 =1. 
Hence ~1 =[ (p-1)/2! ]? (mod p) 


i.e. [(p-1)/2]! satisfying the quadratic congruence 
x? + 1 =0 (mod p). 


Example 1 : p = 17 p is of the form 4k + 1. (p—1)/2 =8 and 8! = 40320 
_ =13 (mod 17), 


Hence 137+ 1=0 (mod 17). 

q Example 2: If pis odd, p> 1, prove that 17.32.52... (2a 
(mod p) 

and 27, 47. 6? ... (p-1)? = (-1) P*!? (mod p) 

Example | gives that if p is an odd prime and if q = p—1/2 then 


pal 
((p-1/2)!)? + (-1) 2. =0 (mod p) if p= 4k + 1. 
Since =—-(p-k) (mod p) it follows that 


p-1 
2 .4.6.. (p-1) = (-1) 2 
Squaring we get, 

2? 4? 62... (p-1)? =(-1)P-! 12 32 52... (p-2)? (mod p). 
Since p is odd p+1/2 is even and p-1 is even, 
hence 2? 4? 62... (p-1)? = 1, 32. 52 (p-2)? = 1) P*!2 (mod p). 
Excercise : For a prime p of the form 4k +3, prove that either 


(p-1/2)! = 1 (mod p) or (p-1/2)! =—1 (mod p) hence (p-1/2) ! satisfies the 
quadratic congruence x* = | (mod p). 


1.3.5... (p-2) (mod p). 
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“1 
Solution : By Wilson’s Theorem —1=(p-1)! = pn? [ (p-1/2)!] 2 
(mod p). i 
= (-1)°*1 | (p-1/2)! (mod p) 
(since p = 4k + 3) 
=-[ (p-1/2)!]? mod p. 
=> [(p-1/2)!2_ = 1 (mod p) 
= ( (p-1/2)! + 1) ( (p—-1/2) !-1) = 0 (mod p) 
=> (p-1/2) |. =—1 (mod p) or (p—1/2) ! 
= | (mod p). 
Exercise : Find all positive integers n for which (n—1)! +1 is a power of n. 


Solution : If n=p then the congruence (p—1)! + 1 = 0 (mod p?) is true for 
p=5, p = 13, p = 563. But no other value of p < 200000. 


If n is a composite then (n — 1) ! + 1 =0 (mod n?) is not true. 
For example take n=6 
36)5!+1. 


3.7. SIMULTANEOUS LINEAR CONGRUENCES, THE 
CHINESE REMAINDER THEOREM AND _ ITS 
APPLICATIONS 


THEOREM 21: Let m, mp... m, be pairwite relatively prime integers 
‘and M =m, mp... m,. Then for integers b;, bz ..b, the system of congruences 


x =b, (mod m)) 
x = bp (mod mg) 
x = by (mod m,) 
x =b, (mod m,) 
has a simultaneous solution which is unique modulo M. 


PROOF: M=m, m... m, 
Let My = M/m, =m, mg... Me] M44 ,., M;- Then (Mx, mx) = | so that My 
has a unique reciprocal M,’ modulo mx. 


That is Mx My’ = 1 (Mod mx). 
Now let x = b; M; My’ + bz My My’ + ...... +b, M, M,’. 
Consider each term in this sum modulo m,. Since 
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M; =0 (mod m,) if i#k 
we have x = by My My’ = by (mod mx). 


Hence x satisfies every congruence in the system. But it is easy to show 
that the system has only one solution mod m. In fact, if x and y are two solutions 
of the system we have x = y (mod m,) for each k and since the m’s are 
“relatively in pairs, we also have x = y (mod M). This completes the proof. 


THEOREM 22: Let mj, my, ... m, be relatively prime in pairs. Let by, 
b».. b, be arbitrary integers and let aj, a9,... a; satisfy (a,, mx) = 1, fork = 1, 
2,...r. Then the linear system of congruences : 


ay x =b, (mod m)) 
(8) a2 X = bp (mod my) 
a, x =b, (mod m,) 
has exactly one solution modulo M = m; my ... m,. 
PROOF : Since (ay, mj) = 1 for k = 1, 2,...r, 
then there exist a,’ such that a, a,’ = 1 (mod my) and a,’ is the reciprocal of 


Then the linear congruence 
ay X = by (mod mx) & x = by ay’ (mod my). 
Now we apply theorem 15 to the system of congruences 
x =b, ay’ (mod m,), k = 1, 2, ....0 
which has a unique solution modulo M i.e. x = by ay’ Mx Mx! = bx ay’ 
(mod m,) 
which satisfy the given system of linear congruences. ° 


Example 1 : Findall x which simultaneously satisfy system of congruences. 


x =1 (mod 3), 

x =2(mod 4) 

x =3 (mod 5) 
Solution : m; =3,m) =4,m3=5 


M =m, m; m3 = 60 M; = 60/3 = 20 
M) = 60/4 = 15, M3 = 60/5 = 12. 
To find the reciprocals of M, mod m,, Mz mod my and M3 mod m3. 
Since 20 x 2 =1 (mod 3)=>M,! =2 
15x3 =1 (mod 4) => M,! =3 
12x3 = 1 (mod 5) = My! =3. 
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Hence = 1x20x2 + 2x15x3 + 3x12x3 = 238 (mod 60) 
= 58 (mod 60). 
So the unique solution is 58 (mod 60), We can verify that 58 satisfies the 
three linear congruences. 


Example 2 : Determine the smallest positive integer that gives a remain- 
der of 2 upon division by 3, a remainder of I upon division by 5, and a remain- 
der of 6 upon division by 7. 


Solution : Let x be a solution. Then the condition requires that 


x =2(mod 5) 
x =1 (mod 5) 
x =6(mod 7) 


M=3xX x7 = 105. 
M, =35,M) =21 and M3 = 15: 
Now we will determine the inverses of M;, i= 1, 2,3, 
Now 
35 x 2 =1 (mod 3) > M;'=2 
21x 1 =1 (mod 5) > M,' = 1. 
15x 1 =1(mod7) > M;’ = 1. 
Therefore 
xX = 2.35.2.4 1.21.1 + 6.15.1 (mod 105) 
= 140 + 21 + 90 (mod 105) 
= 251 (mod 105) 
= 41 (mod 105). 
One can easily verify that 41 is the smallest integer which satisfy the 
above linear congruences. 
APPLICATION OF CHINESE REMAINDER THEOREM : 


By applying Chinese remainder theorem we will solve polynomial 
congruences with composite moduli. 

THEOREM 23: Let f be a polynomial with integer coefficients, let m,, 
Mp, ... mM, be positive integer relatively prime in pairs and let m= my, m)...m,. 
Then the congruence 

(9) f(x) = 0 (mod m) 

has a solution if, and only if, each of the congruence. 

(10) f(x) =0 (mod mj), 1=1, 2, ...1 


l 
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has a solution. Moreover, if v(m) and v(m;) denote the number of solution 
_of (9) and (10) respectively, then 

(11)vG@m) = v(m;) v(m ) ....v(m,). 

PROOF: If f(a)=0 (mod m) then f (a2) = 0 (mod m,) for each i= 1, 
_2,...1. Hence every solution of (9) is a solution of (10). 


Conversely, let a; be a solution (10). Then by the Chinese remainder theo- 
_rem there exists an integer a such that 

(12) a =a; (mod mj) fori = 1, 2...r 

So f(a) =f (a;) =0 (mod m)). 

Since m;’s are relatively prime in pairs we have f (a) = 0 (mod m). There- 
fore the number of integera which is a solution of (10) is also a solution of (9). 


Since each aj runs through the v(mj) solution of (10) the number of integers a 
which satisfy (12) and hence (10) is v(m)).....v(m,). This proves (11). 


A 


THEOREM 24: An even perfect number n ends in the digit 6 or 8 ie 
n =6 (mod 10) 

or n =8 (mod 10). 

PROOF: A perfect number nis of the form n = 2! (24-1), where 2-1 


$ a prime k must be prime. If k = 2, then n =6. We may confine our attention 
o the casek >2.k=4m+1 or4m+3 Ifk=4m+1 then 


n=24m (2am =H) 


= 28m+ _5 4m 
=D G Gn 
But 16 =6 mod 10. 
Hence n =2.6-6 = 6 (mod 10). 
If k =4m+3 


np =24m#2 (24m+3_)) 
a 28mt+5 au gamt+2 
= 2.1627"! _ 4.16" 
Since 16 =6 (mod 10) 
n =2.6—4.6 (mod 10) 
= 2.12 (mod 10) 
=8 (mod 10). 
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Hence proved. 
Exercise: If p is any prime other than 2 or 5, p divides infinitely many 
CEL EDS TM Te eee Caper 1111111111 
(Cig RRO eI) Re aoe 9999999. 
Solution : 
(@) 1 =4-3 =4k-3 
11 =4x24+3=4k 43 
111 =4x 2743 = 4k +3 
10 LL Sie 108 + 3 = 4k +3. 


So these numbers are divisible by primes of the form 4k + 3 and 2 or 5 are 
not of the form 4k + 3. 


(ii) 9 =4x2+41 
99 =4x25-1 
999 =4x250-1. 


9,99,..... are either of the form 4k +1 or 4k-1. So they are divisible by 
primes of the form 4k+1 or 4k-1 not by 2 or 5. 


3.8. SOME ALGORITHMS 
ALGORITHM (Chinese Remainder Theorem) 


Given pair wise coprime integers m; (1 <i <k) and integer x;, this algo- 
rithm finds an integer x such that x = x; (mod mj) for all i. 


1. [ Initialize] set i — 1, m< mj, x < xj. 


2.[finished?] If i= k output x and terminate the algorithm. Otherwise set 
i — i+1, and by a suitable version of Euclid’s extended algorithm compute u 
and vy such that um + vm; = 1. 


3. [Compute next x] set x < um x; + vm; x, m < mm; , x < x mod mand 
go to step 2. 


Here we give the following computer program in BASIC to solve the 
following congruences: 
x = 0 (mod 5) 
x= 1 (mod 7) 
x = 8 (mod9). 
100 REM CHINESE REMAINDER THEOREM 
101 PRINT “ I WANT YOU TO THINK A NUMBER” 
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102 PRINT “ LESS THAN 316 WRITE THIS NUMBER” 

103 PRINT “ DOWN AND DIVIDE BY 5 NOW GIVE ME “ 
104 PRINT “ THE REMAINDER LEFT OVER” 

110 INPUT Rs 

111 PRINT 

120 PRINT “NOW DIVIDE YOUR ORIGINAL NUMBER BY” 
121 PRINT “7 AND GIVE ME THIS REMAINDER” 

130 INPUT R, 

131 PRINT 

140 PRINT “ NOW DIVIDE YOUR ORIGINAL NUMBER BY” 
141 PRINT “9 AND GIVE ME THIS REMAINDER” 

150 INPUT Ro 

151 PRINT 

160 REM CALCULATE NUMBER 

170 LET A = 126 * Rs +225 * Ry 

180 LET X =A - INT (A/315) * 315 

190 PRINT 

200 PRINT “IAM HAPPY TO TELL YOU THAT YOUR” 

201 PRINT “NUMBER CHOSEN WAS”, x 

210 END 


RUN 
I WANT YOU THINK OF A NUMBER 
LESS THAN 316 WRITE THIS 
NUMBER DOWN AND DIVIDE BY 5. 
NOW GIVE ME THE REMAINDER LEFT OVER ? 0 
NOW DIVIDE YOUR ORIGINAL NUMBER BY 7 
AND GIVE ME THIS REMAINDER ? | 
NOW DIVIDE YOUR ORIGINAL NUMBER BY 9 
AND GIVE ME THIS REMAINDER ? 8 
1AM HAPPY TO TELL YOU 
THAT YOUR NUMBER CHOSE N WAS 260. 
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EXERCISE 
Find the remainders when 2° and 41° are divided by 7. 


Prove that the integer 53! + 103°3 is divisible by 39 and that 111393 
+ 333!!1 is not divisible by 7. 


2 
If p is a prime satisfying n < p < 2n, show that ( “ = 0 (mod p). 


For n= 1 , using congruence theory establish each of the following: 
(ay Tse oak 

(b) 13 jant2 ie 42ntl 

(c) 27| gsn +l 4 snt2 

(43 [6742472071 

Find the remainder when 44444444 is divided by 9, 

Determine the last three digits of the number 7999 (Hints: TMs (1+ 


400)" = 1 + 400 (modulo 100) 


Find the remainder when 3! is divided by 5. 

Solve the linear congruence 

(a) 36 x = 8 (mod 102) 

(b) 34 x = 60 (mod 98) 

(c) 140 x = 133 (mod 301) 

(d) 6 x = 15 (mod 21) 

Solve each of the following set of simultaneous equation 


(a) x =5 (mod 11) x = 15 (mod 31), x = 14 (mod 129) 
(b) x = 5 (mod 6) , x =4 (mod 11), x =3 (mod 17) 
(c) x = 1 (mod 3), x =2 (mod 5), x = 3 (mod 7) 


Prove that 1835!9!0 + 1936206! = 9 (mod 7). 
Find the remainder when 2 (26!) is divided by 29. 


Prove that the odd prime divisors of the integer n* + | are of the form 
4k +1. 


Verify that 4 (29!) + 5! is divisible by 31. 
Show that if p = 4k + 1 is prime then 2[(2k)!]2 =-I1 (mod p). 


Write a computer program to solve a set of simultaneous congruences 
when the moduli are relatively prime. 


16 
17 


28. 


29. 


30. 
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Solve x2 = 2 (mod 7”) . 

Show that 259 + 3° is divisible by 13. 

Show that 7 | n? + 1 for any n. 

Determine the remainder when 2372 is divided by 37. 
Show that 118! — 58! is divisible by 7. 


Prove that each meinber of the set of n-1 consecutive integer n! + 2. 
n!+3,....n!+n_ is divisible by a prime which does not divide any 
other member of the set. 


. Leta, b, n be positive integer such that n divide a” — b". Prove that n 


also divides (a°—b") / (a-b). 


. Prove that 5 n? + mn =0 (mod 12) for all integer n. 


A number whose only digits are 1 is called a Repunit. 


Factorize 111111111 (9-one) into product of primes. 


. Find all integral solutions of x24+1=0 (mod 52). 


Find the remainder when 2!000000 is divided by 77. 


_ Prove that 1 +a+a2+....+ a%™-! =0 (mod m) 


if g.c.d (a, m) = 1 and g.c.d (a-1, m) = i. 
Let n= 2" +1. 


gntl 
(a) Prove that Dn (2 -1). 
(b) Prove that if a| b, then (24— 1) | (2°- 1). 
(c) Prove that (22""' — 1) | (2?"" -1). 


Prove that if p denotes an odd prime, then 2(?-)/? =+ 1 (mod p). 


Given any positive integer k, prove that there are k consecutive integers 
each divisible by a square > 1. 


oo 


|CHAPTER| 


SOME THEOREMS ON 
DISTRIBUTION OF PRIME NUMBERS 


4.1. INTRODUCTION : 


If x > 0, we define 7(x) as the number of primes not exceeding x. Then 
T(x) —> 00 as x —>00 since there are infinitely many primes. The behaviour of 1 
(x) as a function of x has been the object of intense study by many celebrated 
mathematicians ever since the eighteenth century. Gauss (1792) and Legendre 
(1798) conjectured that (x) is asymptotic to x / log x, that is (x) ~ x /log x, 
which means 


ti ee 
X—>00 x 
This conjecture is known as PRIME NUMBER THEOREM (PNT). 


The proof of this PNT is given by Hadamard, and de la Vallee Pousin and 
are analytic in nature. In this chapter we will concern with elementary theo- 
rems on primes, We will show that PNT can be expressed in several equivalent 
forms. We will define in the section 4.2 some auxillary functions which help in 
establishing equivalent theorems of Prime Number Theorem. 


4.2. CHEBYSHEV’S FUNCTION y (x) and 9 (x). ; 
DEFINITION 1 : For x > 0 we define Chebyshev’s y function by the 
formula 


ya) = 2 A), 
nsx 


where A(n) is the Mangoldt function. 


Since A(n) = 0, unless n is a prime power we can write the definition of 


W(x) as 
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ao co a 
(1) wos rd A@= ZF E AP™=E 
: r nsx m=1 »P. m= pcx 1/m 


p sx 
follows: 
The sum on the right of (1) is a finite sum . 
For if x!" <2 ie. if 1/m log x < log 2 


or if m > log x / log2 

ae. m = [log x/log 2] + 1 the sum on p is zero . 
ao 

(2) Wa) = z z, logp. 


mSlogx/log2 p <x!" 


DEFINITION 2 : if x > 0 we define Chebyshev’s 9 — function by the 
- equation 


ao 
(3) Sx) = Z logp 
psx 
where p runs over all prime < x. 
By using (3) in (2) we get 
w(x) = = = log p 
mslogx/log2 pstegx!/™ 
= SOY See) 
mslogx/log2 
= 9 (x) +9 (x7) 4 9x") 4.... 
(4) => yw(x)-$ (x) 20. 


The next theorem gives the relation between (x) / x and 9 (x)/x. 
THEOREM 1: For x >0 we have 
2 
Ne. YX) | S(x) % (logx) 
x x 2Vxlog2 
Further, 


jim LX_8@) 
XxX x 


=0. 


108 Some theorems on Distribution of Prime Numbers 


PROOF : From (4) we find 


0<wH-S8~@ < z= 8 


2< mslogx/log2 
But 


%9 (x)= E logp< 
p<x 


(xy; 


2 logx <x log (x). 
ps<x 


Hence f 9 lm) < x Vm log x!/™, 


So 


O0<wix)- 9%) < 5 SO") log (xm) 


2s mslogx/log2 


git log vx 
log2 


_ logx vx lo 
log2 2 


_ Wx (ogx)? 


2log2 
Since x > 0 dividing by x we get 


0< (x) Me $(x) us vx (logx)? £) (logx)? 
x x ¥ 2log2 vx 2log2* 


Taking limitx >0,RHS>0. 


Hm) 803)) 9 


Hence lim [ rs iy 


X—>00 
This implies 


lim w(x)/x = lim 9(x)/x. 
x00 


x—>00 


The next theorem plays a key role in establishing relation between m(x) 
and (x) and 9(x) and also establishing equivalent theorems of PNT. 


THEOREM 2: (Abel’s identity) For any arithmetical function a(n) let 


A(x)= = a(n) 
nsx 
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where A(x) = 0 if x <1. 
Assume that f has a continuous derivative on the interval [y, x], where Q < 
_ y <x, then we have ¢ 


x 
(5) a(n) f(n) =A) f(x) - A(y) a -J A(t) PO dt. 
y 


y<nsx 


PROOF : Let k = [x] and m= [y], [x] stand for greatest integer functi ea 
ie the greatest integer contained in x. We write x = [x] + {x} where {x} jg the 


fractional part of x. 
So A(x) =A(k) and A(y) = A(m). 


{x] 
then S an)t@) =. 4%. aa) f@ 
y<ns<x n=[y]+1 


= } (A(a)-Am-1)) fn) 


n=m+1 
k k 
= = A(n)f)- 2 A-I) fn), 
n=m+i n=m+l 


Changing the variable in the second term we get 


k k-1 
ry a(n) f(n) = Ms. A(n) f(n) - ie A (n) f(n+ 1) 


y<nsx 


k-1 
de ; A (n) {f(n) — f(n+1)} + A(k) f(k) — AGm)f(m+1) 
n=m+ 


n+l 
k-1 
=- x A(n) J f' () dt +A (k) f(k) —A(m) f(m+1) 
n=m+l n 
n+l 
k-1 
So) 0k J A (t) f’ (t) dt + A(k) f(k) — A(m) f(m+1) 
n=m+l 


(since in [n, n +1], A () = A(n)) 
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x 


=- J Ke Fy des AI 4 A(t) f’ (dt 
k 


m+1 


m+1 


=A (y) f(y) - J A(t) f' (t) dt. 
x 


x 


— A(x) f(x) — A(y) f(y) - J A(t) f' (@® dt 
y 
Hence proved. 


4.3. SOME EQUIVALENT FORMS OF THE PRIME NUMBER 
THEOREM. 


THEOREM 3 : The following relations are equivalent: 


(6) lim 7% (x)logx /x=1 
x0 
© (7) lim S(x) /x=1 
x70 


(8) fim Wo /x=1. 
x 


PROOF : (7) © (8) follows from theorem 1. 


To prove (6) <> (7) we require the following lemmas which relate 7(x) 
with 9(x). 
LEMMA 1: For x2 2, we have 


x 
(9) Ox) = 1(x)Glog(x) — J T(t/t dt 
2 
and 
x 


(10) 1 (x) =x) / log(x) ~ J (Ge@ytlog’y at. 
vs 


PROOF : We prove (9) and (10) by using (5). 
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Let a(n) denote the characteristic function of the primes; then 


lif n isa prime 


a(n) = 
0 otherwise. 
Then we have 
Mx)= D P= a(n) 
psx l<nsx 


8) = z logp= a(n) log n 


x I<nsx 
Taking f (x) =log x in (5) by taking y=1 we obtain 
Bix)-=. | BS a(n) log n 
1<nsx 


x 


= m(x) log(x) — m(1) log(1) — J m(t)/t dt, 
1 


which prove (9) since 7 (t) = 0 for t < 2. 
Next, let b(n) = a (n) log n and write 


mx) = % bn) i/logn ° 


3/2 <nsx 
9) = = btn). 
nsx 
Taking f (x) = Ilogx in (5) with y = 3/2, 


we obtain 


x 


m(x)= 9(x)/ log(x) — &(3/2) / log(3/2) - J (S(p/t log*t ) dt 
1 


which proves (10) since 9 (t) = 0 if t<2. 
PROOF OF THE THEOREM. We have to prove (6) = (7). 
First to show that (6) =>(7) we have from (9), 


x 
O(x)/x = 1(x)-log(x) / x =) mn (t/t dt. 
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Taking limit as x > 0 we obtain 
(6)=> lim m(x)logx /x =1 
x00 


(7) follows provided we show that 


x 


lim 1/x J Te (t/t dt = 0. 


x70 9 
Now — 
(6) > n(t)/t dt=0( I/log t) 
for t=>2 so 


x x 
1 
Ix J m(t)/t dt =0(1) = (4) 


Now 


x vx 


J arriogt = J altos [ dt / log t 


vx x-vx 
s+ : 
log2 logvx. 
So 


ux J dt/logt + 0. 
z 
This proves (6) => (7). 
To show (7) => (6), we know from (10) 


x 


m (x) logx /x =9(x)/x + log(x)/x J (G(H/tlog’t) dt. 
2 


Taking limit as x > © we obtain, 


lim (1 (x) logx /x) = es (8(x)/ x) 5 


x00 
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x 
. ( logx 
+ lim (2) J (S(t tlog2t) dt, 


In order to show (7) => (6) it is sufficient to show that 


x 
lim aeaooeege (G(t)/ tlogt) dt =0. 


X00 2 


But (7) > $ (t) =0 (t) so 


x 
logx i aig 2 | 
By tlog?t x log?t | 
Now 

i dt ‘ dt | dt 

. log? t 7 Hi log?t* 7 log’ t 
Ui, xa 

log?2 log?-Vx 

ek, xo 

log22 log?-Vx 


x 


Hence log x/x J dt / log*t + 0. 
= 2 


This proves (7) => (6). So (6) and (7) are equivalent. Again (7) and (8) are 
uivalent Hence we have (6) <> (7) <= (8). Hence proved. 


THEOREM 4 : Let P, denote the n'® prime then the following relations 
equivalent: 


(11) lim 2(x) logx /x = 1 and 


Xe 


(12) lim p./nlogn = 1. 
n 


Nx 


PROOF : To show (11) = (12). 
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Assume (11) holds. Taking logarithms we obtain 
lim [log7(x) + log log x — log x] = 0 


x70 


7 lim [log x(logm(x) /logx) + (log log x / log x)- 1] = 0 
x70 


=> lim log (x) /logx =1. 

x70 
So we get 
lim m(x)logn(x)logx _ tin m(x)log x \ { log m (x) aA 
X00 xlogx x0 Xx logx : 
That is 


lim (x) log m(x) / x = 1. 
x70 
It x= P, then 7 (x) = n and m (x) log n(x) =n logn 
Hence, we get 


lim = |i = 
Roa 1(x) log m(x) / x lisa nlog n/p. iL 


Next to show that (12) => (11). 


Assume (12) holds. Given x, define n by the inequalities 


= 
Pay = Bea 


so that n= 7 (x). Dividing by n log n, we get 
Pri ees 2 Pas Pn+l (n+ I)log(n+1) 
nlogn nlogn nlogn (n+1)log(n+1) nlogn 


Now let n + © and using (12) we get 


lim x/nlogn=1 
no 


lim x/7(x) log (x) =1 
x—0 


or 


(12) lim = m(x) log m(x)/x =1. 
xo 
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Taking logarithm of both sides we obtain 
log log n(x 
=> lim log tomo + gles 2) =0. 
x30 logn(x) 


Since log 1 (x) > © as x — 00 it follows that 


fina 14 loglogm(x) _ logx % 
X00 log a(x) logn(x)) — * 


(13) => lim log x / logm(x) =1 


x70 


Now we get 


lim (x)logx _ a m(x)logx logx 
x log (x) 


© im f solar | lim logx af 
x0 x x20 | logm(x) : 


which proves (11) by (12) and (13). 


x70 x X—>00 


. INEQUALITIES FOR x(n) AND py 


THEOREM 5: For every integer n 2 2 we have 
(14) 1/6 n/logn < n(n) <6 n/log n. 
PROOF : Consider the binomial coefficient 


2n\ _(@2n)! 
n}  nint 
4 = (27)? Ss 22n = (1+1)2" 


2n (2n 2n 
= =. > F 
k=0 (k n 


Now 


Also 
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For n=! 


For n =2 


4 
Vege "| = ANP QN2N . 


Assume it is true for n. To prove it for (n+1) 


‘2n 
Onl ea eee male 2(2n)! / (n! nt) 


—2(n+ (2n)'(n +1) 
~ ni(n+1)nt(n +1) 


_ Qn+1)(2n)!(2n +1) 
~ (n+ii(n+D)! 


is (2n+ 1)(2n)\(2n +1) 
(n+1)!(n+1)! 


(2n+2)! 
(n+ 1)'(n+ 1)!" 


2n 
at Pern me 
Hence 2°31 4 |} 


is proved by induction on n, so we have 


2n 
CSA oe S 2 


<4! 


Taking logarithm of both sides of (15) we get 


(16) n log 2 < log (2n)! - 2 log n! < n log 4. log (2n)! can be calculated 
from the Legendre’s identity . 
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Ix}! = I p%) 
psx 
where [x] is the greatest integer function. 
This can be proved as follows : 
log[x]! = = logn= 2 =F AC) 
nsx nsx d/n 


I 


= A(n)[x/n] 
nsx 


= & [x/p™]logp 


psx m=1 
= E a(p) log p 
psx 
where a(p) = 5 [x/p™]. 
m=1 
[log n/logp]} 
Hence logn!= © a(p)logp;wherea(p)= = = {n/p™]. 
psn m=1 
Hence 
log (2n)! — 2 logn! 
[log2n/logp]} 
= »» {[2n/p™] — 2[n/p™]} log p. 
ps2n m=1 
Since [2x] — 2[x] is either 0 or 1, 
(16) implies 
[log2n / logp] 
nlog2 < 2 Sf logp 
ps2n ml 


<, U,=log2n = m (2n) log 2n. 
p<2n 


This gives us 


nlog2_—2n log2 1 2 
(17) % (2m) 2 Tog on log2n 12 4 log2n 
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since log 2 > %. For odd integers we have 
(18) m (2n+1) > 7 (2n) > 
1 2n a 2n (2n+1) sll (2n+1) 
4log2n 4 (2n+1) log(2n+1) 6 log(2n+1)° 
Since 2n/ (2n+1) = 2/3. 
(17) and (18) imply 
T(n)>1/6 n/logn 
for all n 2 2 which proves left hand side of (14). 
We will prove the right hand side inequality of (14). 


log (2n)!—2logn!= { [2n/p]-2 [n/p]} log p. 
ps2n 


For primes p in the interval n < p< 2n, we have [2n/p] — 2 [n/p] = 1 
So 


log (2n)!-2logn!=> = logp=&(2n)-9n). 


n<ps2n 

(16) implies 

$(2n) — 9 (n) <n log 4 
If n= 2" then 

9 at!) — § 2) <2" log 4 =2"! log 2. 
Summing on r = 0, 1, 2, ... k, we find 

9 (ak+1) < 2k*? Jog 2. 

Now we choose k so that 2k <n< k+l and we obtain 
9m) < 9K!) < 2k? Jog2 < 4n log 2 
But if 0< a < I, we have 


(1 (n) — 7 (n® ) ) log n*< logp < 9% (n)<4n log2. 


n“<psn 
Hence mn) < (4n log 2/ @ log n) + 1 (n®) < (4n log 2 /alog n) + n™ 
=n/logn (4 log 2 /a +log n/n!~%), 


Now if c>O and n2 1, the function f(x) = x~ log x attains its maximum 
I/e 
atx=e"*) 


so n° lognS I/(ce) forn> 1. 
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Taking © = 2/3 in the inequality for 7t(n) we find 
mT(n) < n/logn( 6 log 2 + 3/e) < 6 (n/ log n). 
This completes the proof. 


4.5. PARTIAL SUMS OF MOBIUS FUNCTION 
DEFINITIONS : If x = 1 we define 


M(x) = = p(n). 


nsx 


The exact order of magnitude of M(x) is not known. Numerical evidence 
suggests that 


|M(x) |< vx if x>1. 

Now we prove that the weaker statement 

lim M(x) /x =0 

x—00 
is equivalent to the prime number theorem. The behaviour of [1(x) as x > 

co is not so regular so we define another function H(x) as follows: 
DEFINITION : If x = 1 we define H(x)= = ,(n) logn. 
nsx 


This function H(x) has relation with [1(x) which is obvious from the theo- 
rem. 


THEOREM 6: We have 
M(x) _ 302.) 


x xlogx 


(19) lim [ 


x00 


lim M(x) _ j;,, HOO 


ie. Z 
rg aa xo xlogx 


PROOF : Taking f(t) = log t in theorem 2 with y = 1 we obtain 


x 


H(x)= y p(n) logn=M (x) tunes | M(t)/t dt. 
nsx 1 


Hence if x > 1 we have, 


x . xlogx xlogx 


M(x) Hix) 1 j M(t) 
1 
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Therefore to prove the theorem we must show that 


x 
(20) lim 1/xlogx J M(t)/t dt=0. 
x00 1 


From the definition of M(x) it follows that M(x) = 0 (x) so 


x 


J Mipiat=0( J dt) =0 (x) 
1 1 


Putting the value of the integral in (20) we get 


x 
lim 1/xlogx J M(t)/tdt= lim (1/xlogx)0(x) =0. 
x00 1 x00 


Hence proved. 
THEOREM 7 : The prime number theorem implies 


lim M (x)/x=0 


x—>00 
PROOF: PNT < lim w (x)/x=1ie. w(x) ~x. 
x00 
We know 
A() =- x Lt (d) log d 
nm 
By Mobius inversion formula : The equation f(n) = » g(d) 
din 
= g(n) = f(d) p (n/d), we have 
d/n 
—H (@)logn= y pd) A (n/d) 
din 


= - DuM)logn= y y p(d)A (nd) 
nsx din 


nsx 
= = p(n) yp Cn). 
nsx 


(Since y (x/n)= =E  A(k). 
ksx/n 


(21)> -H(x)=-3 ae A ali Le (n) y (x/n). 
nsx 


nsx 
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Since y (x) ~ x, if € > 0 is given, there is a constant A > 0 such that 
| w(x)/x - 1|<e whenever x 2A. 
=>|w(x)-x|<€x whenever x 2A. 
Chose x > A and splitting the sum on the right of (21) into two parts, 


Dey 
nsy y<nsx? 


where y = [x/A]. 


ice. 
> eM) yn) = 5 pO) yYO/n)+ Fy BM) W (/n) 
nsx nsy y<nsx 

=z, +2, say 
Now 

Z= EF WO) wWONn)= FT p(n) dnt y (x /n) — x/n). 
nsy nsy 
=x y b(n + LY p(n) (W (x/n)-x/n) 
nsy nsy 

So 


IX l= 1 2 wi yom| <x} 5 pon| 
nsy nsy 
+ > |w (x/Mm)-x/ 
nsy 


<x+e > x/n (Since | y (x/n)—x/n|< €x/n ifn<x/A=y) 
<x+ex(1+logy) 

<x+Ex+Ex logx. 

In, we have y<nSxson2y+1 

Hence x/n S$ x/y+1 <A 

because y<x/A<y+1 

xn<A=> w(x/n) < w(A). 

|Z, | <xw (A) 

Hence [HG) [=| 2 1 (a) y Gn) |< Zz, 1+12,| 
<(l+6)x+6x log x +xy (A) 


<(2+w(A))x+ex logxife<1. 
So given any & such that 0<€<1 we have, 
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JH (x) |<(24w(A))x+exlogxifx>A 
=> |H(x)|/ x logx <(2+y (A))/logx + €. f 
Choosing B >A so that x > B implies (2+ w (A))/logx <e. 
Then for x >B we have 
|H(x)|/x logx <2¢€ 
=> H(x)/ (x log x) > Oas x > 00. 
Hence proved, 
The following gives the converse of theorem 7. 
THEOREM 8: M(x)=0(x) asx > 
=> W(x) ~xasx—> oie, PNT. | 
The proof is difficult. One can refer the book by Apostol (2 ). | 
THEOREM 9 : If 
A(x)= yp) /n | 


nsx 


the relation A (x) =0(1) asx > Le. A(x) > Oas x 30 implies 
PNT. 


That is PNT is a consequence of the statement that the series z L(n)/ ni 
n=! 
is convergent to the sum 0. 
PROOF : To prove the theorem we will show that A (x) =0 (1) > bt (x) 
= 0 (x) which is equivalent to PNT. By Abel’s identity we have 


M(x)= 5 p(n)= =f p(n) en 
nsx nsx 


=xA(x) - J A (t) dt 
1 
x 

=> M@ =A @) Ie | A (t) dt 
i] 


= lim M (x)/x = lim A (x)- lim Ix J A (t) dt. | 
x0 x70 x00 


In order to prove the theorem it is sufficient to show that 
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x 


(22) lim ux J A(t) dt=0. 
x70 1 


Since A (x) = 0 (1) as x > ©, given €>0, 
there exists s such that | A (x) |<eifx2sand |A(x)|<1 forall x>1. 
We have 


x 


x Ss 
| I/x i A (t) dt | < | 1k ; A (t) dt |+| 1/x J A (t) dt| 
1 1 s 
<(s-1)/x + &(x-s)/x. 
Letting x > © we find 


x 


lim sup | ux J A(t) dt|<e 


x0 1 


and since € is arbitrary this proves (22). 


EXERCISE 
1. Prove that the following two relations are equivalent ; 
(a) 1 (x) =x/ log x + 0 (x / log? x) 
(b) 9 (x) =x + 0 (x/ log x). 
2. If a>Oandb>0 then prove that 
Tt (ax) / 1 (bx) ~ a/b as x — 90. 
3. If0<a<b, there exists an xq such that 7 (ax) < 7 (bx) if x > Xo 


4. Prove that for every n> | there exists n consecutive composite num- 
bers. 


5. Let S, denote the sum of first n primes. Prove that for each n there 
exists an integer whose square lies between S, and Sy41. 


0 
6. Let S, denote the nth partial sum of the series A 1 / r(r+1). 
r= 


prove that for every integer k > 1 there exists m and n such 
that S, - Sy = I/k. 


7. Prove that forallx21wehave 2 A(n)/n=logx+0(1). 
nsx 


ooo 


CRYPTOGRAPHY 


BASIC NOTIONS : Cryptography is the study of method of sending 
messages in disguised form so that only the intended recipients can remove the 
disguise and read the message. The message we want to send is called plaintext 
and the disguised message is called the ciphertext . The plaintext and ciphertext 
are written in some alphabet consisting of certain number N of letters. The term 
“letter” (or “character”) can refer not only to the families A-Z, but also to 
numerals blanks, punctuation marks, or any other symbols that we allow our 
selves to use when writing the messages . The process of converting a plaintext 
to a ciphertext is called enciphering or encryption, and the reverse process is 
called deciphering . 


The plaintext and ciphertext are broken up into message units. A message 
unit might be a single letter, or pair of letters (digraph), a triple of letters (trigraph) 
, or block of 50 letters An enciphering transformation is a function from plaintext 
message unit to ciphertext message unit i.e. f: PC. 


The deciphering transformation is the map f ~! which recovers the 
5 J 1 
plaintext from the ciphertext i.e. C_!—, p. 


So 


-1 
@. pe tc See 
Such a set up is called cryptosystem . 


5.1. CLASSICAL CRYPTOSYSTEM : 


Classically, the making and breaking of secret codes has usually been 
confined to diplomatic and military practices. With the growing quantity of 
digital data stored and communicated by electronic data processing systems, 
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organization in both public and commercial sectors have felt the need to protect 
information from unwanted intrusion . 


One of the earliest cryptographic system was used by the great Roman 
emperor Julius Caesar around 50 BC Caesar wrote to Marcus Cicero using a 
rudimentary substitution cipher in which each letter of alphabet is replaced by 
the letter which occurs three places down the alphabet, with the last three letters 
cycled back to the first three letters. thus Caesar Cipher is given by 

(2) P: ABCDEFGHITKLMNOPQRSTUVWXYZ 

C: DEFGHITKLMNOPQRSTUVWXYZ ABC 


Example : Plaintext message P is 


(3) CAESAR WAS GREAT 
is transformed into ciphertext message i.e. by Caesar cipher (2) 
(4) FDHVDU ZDV JUHDV. 


The Caesar cipher can be described only using congruence theory . 
We first give numerical values to the alphabets A-Z as follow. 


A By 7 DOME aR! GMs I J KLM 
Ol 02) 1) (03 i D405 (O06: » OP AMOR OONEO UTD) 13; 


N LOM QR Ss POO Te veNe OX YX  Z 
14 US: diilG,, hdieean. (Sil GLO: ye SOMO eM eet: a Ae pi D5y, 26 


Some authors assign values 0-25 to A — Z. One should follow one of 
these two sets of values. 


If P is the digital equivalent of a plaintext letter and C is the digital 
equivalent of the corresponding ciphertext letter, then 


C =P +3 (mod 26). 
Thus the letter of the message (3) are converted to the equivalents : 
(5) 01.05 19.01 18 230! 1907 18 0501 20. Using the congruence 
C = P+3 (mod 26), 
this becomes the ciphertext. 
(6) 06 04 08 22 04 21 26 04 22 10 21 08 04 23. 
To recover the plaintext, the procedure is 
P =C-3=C + 23 (mod 26). 


That is given ciphertext if we add 23 to each of the numerical values and 
reduce it to modulo 26 we get the numerical equivalent of the plaintext and 
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That is given ciphertext if we add 23 to each of the numerical values and 
reduce it to modulo 26 we get the numerical equivalent of the plaintext and 
thus read the message. 


The Caesar cipher is simple and hence insecure . 


Inconventional Cryptosystem, the sender and receiver jointly have a secret 
key. The sender uses the key to encrypt the plaintext to be sent, while the 
receiver uses the same key in order to decrypt the ciphertext obtained. Public 
key cryptography differs from conventional cryptography in that it uses two 
keys, an enciphering key Kg and the deciphering key Kp. Cryptoanalysis is the 
science of decoding the ciphertext without the knowledge of the key. 


Example 1: Suppose we are using 26 letter alphabets A—Z with numerical 
equivalents 0-25. 


Let the letter P €{ 0, 1, .. 25} stands for a plaintext message unit. 
Define f: PC 
f (P) = { P+3 if x < 23 
{ P-23 if x > 23. 
i.e. f(P) = P+ 3 mod 26 
In general we write 
C =f(P)=P+bmodN. 


where b is a fixed integer which is the letter alphabet with numerical 
equivalents 0, 1, 2, .... N-1 . To decipher the ciphertext message unit C « { 0, 
1, 2,... N-1}, 


we compute 


p =f! (C)=C-b (mod N) 
and b is called is key and call f a shift transformation . 


As a special case we have Caesar cipher with N = 26 and b = 3. Suppose 
we want to encipher the word “Book”. We first convert to numbers. 


01 14 14 10, 

then add 3 modulo 26, This transforms to 
04 17 17 13, 

then translate back to letters “ERRN”. 


To decipher the message one subtract 3 mod 26. For example the ciphertext 
“ZKB” gives the plaintext “WHY”. 
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Example 2 : (Frequency Analysis) 

Suppose we intercept a message which we know was enciphered using a 
shift transformation on single letter of the 26-letter alphabet, we have to find b. 
For this we use frequency analysis which means the frequently occurring letter 
in the English language. We note that “E” is the most frequently occurring 
letter in the English language so it is reasonable to assume that the most 
frequently occurring letter in ciphertext is the encryption of E. 

Suppose the ciphertext message is “PXCDEXFXDPRA”. “X” is the most 
frequently occurring character in the ciphertext. That means the shift takes “E” 
=4 to “X” =23 i.e. 23 =4 +b (mod 26), so that b= 19 to decipher the message, 
hen, it remains to subtract 19 from the numerical equivalents of 

“PXCDEXFXDPRA” 

“ PXCDEXFXDPRA” = 15 23 02 03 04 23 05 2303 15 170 

— 22 04.09 10 11 04 1204 10 22 247 
= “WE JKLEMEKWYH” 

[ Since -19 = 7 (mod 26) we add 7 mod 26] 


Example 3 : If we encipher the ciphertext “FQOCUDEM” assuming ‘U’ 
as the frequently occurring character in the ciphertext then the message is 
“PAY MENOW”. 


AFFINE TRANSFORMATION : This is a more general type of 
transformation of (Z/NZ) called an affine map. 


C=aP +b modN, where aand b are fixed integers they together form the 
enciphering key Kg = (a,b). 


To decipher a message that was enciphered by means of the affin map 


C=aP +b (mod N) to solve for P= alc +b! (mod N) where a‘ is the 
inverse of a mod N and b is equal to ~a™! b. This works only if g.c.d. (a,N) = 1. 
The deciphering key Kp is the pair (a! b!). 


Example 4: Suppose a ciphertext is given written in 26-letter alphabet 
with A~Z assigned the numerical values 0-25, Suppose we know most frequently 
occurring letter of ciphertext is “K”, and the second most frequently occurring 
letter is “D”. It is reasonable to assume that these are the encryption of “E” and 
“T” respectively, which are the two most frequently occurring letters in the 
English language. thus replacing the letter by their numerical equivalents and 
substituting for P and C in the deciphering formula we get 
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10 a‘ +b‘ =4 (mod 26) 
3 a‘ +b‘ = 19 (mod 26). 
Since “E” =4 “D” =3 “T” = 19 and “K” = 10. 
We have to solve the: congruence for a* and b* subtracting we get 
Ta! = 11 (mod 26) 


and a =7!.11. 

Since 7.77! 21 (mod 26) > T! = 15 

since 7.15 =1 (mod 26). 

Hence al = 71.112 15.11 = 165 = 9 (mod 26) 


By putting the value of a’ in the first congruence we get 
10x9+b! =4 (mod 26) 
> b! =4-90 (mod 26) = 18 (mod 26) 
So the message can be deciphered by means of the formula 
P =9C + 18 (mod 26). 

DIGRAPH : If our message units are digraphs in 27 letter alphabet 
consisting of A-Z and a blank, we might first let the blank have numerical 
equivalent 26 and then label the digraph whose two letters corresponding to x, 
y €{0,1,2,.... 26}. By the integer 

QIx+y €{0,1,2.... 728}. 

We consider the individual letters as digits to the base 27 and we view the 

digraph as a 2—digit integer to that base. 


Example 1: The digraph “No” corresponds to the integer 
27.13 + 14 = 365 
since N = 13 and0= 14. 


TRIGRAPH : If we use trigraphs as our message units, we could label 
them by integer 


729 x +27 y +2 (Ol... 279 -1 = 19682}. 
in general, we can label blocks of k letters in an N-letter alphabet by 
integers between 0 and Nk-1 by regarding each block as a k-digit integer to the 
base N. 
5.2. PUBLIC KEY CRYPTOGRAPHY 
We studied in 5.1 that a cryptosystem consist of a Ito 1 transformation ! 


7 2) 
73 NE ifs 
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We use enciphering key Kg is the pair (a,b) and deciphering key Kp to 
compute f-!. 


In affine cryptosystem family, deciphering is accomplished by an affin 
map, namely 


P =a! C-a! b(modN). 


Here one would have to allow the possibility of examining a large number 
of corresponding plaintext ciphertext message units because by the definition 
of public key system, any user can generate an arbitrary number of plaintext — 
ciphertext pairs. 


The name “public key” means that the information needed to send secret 
message the enciphering key Kg can be made public information without 
enabling any one to read the secret message. 


Suppose we have some population of users of the cryptosystem, each one 
of whom wants to be able to receive confidential communications from any 
one of the other users without a third party being able to decipher the message. 
Some central office can collect the enciphering key Kg, from each user A and 
publish all of the keys in a “telephone book”. Some one wanting to send a 
message merely has to look up the enciphering key in this “telephone book” 
and then use the general enciphering algorithm with the key parameters 
corresponding to the intended recipient . Only the intended recipient has the 
matching deciphering key needed to read the message . 


We notice that with a public key system it is possible for two parties to 
initiate secret communication without ever having had any prior contact without 
having established any prior trust for one another, without exchanging any 
preliminary information. The information necessary is publicly available . To 
decipher the message it is not always easy for the public to get the deciphering 
key. 

DEFINITION : We define, a public key cryptosystem is a system with 
the property that some one who knows only how to encipher can not use the 
enciphering key to find the deciphering key without a prohibitively lengthy 
computation . 


In other words the enciphering function f : P > C is easy to compute once 
the enciphering Kg is known, but it is very hard to compute the inverse function 


f-!: CP. That is the function f is not invertible without some additional 
information. Such a function f is called a one-way function or a trapdoor 
function. 
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it 
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KEY CRYPTOSYSTEM . 


Classical Crypto system 


Once enciphering information is 
known, the deciphering 
information can be implemented 
in approximately same order of 
magnitude of as the enciphering 
transformation. 


It takes a little longer time for 
decipher because one needs to 
apply Euclidean algorithm to find 
an inverse modulo N. 


The authentication of the 
communication is not 
maintained. 


4.In this system sendig message is 


5: 


faster to implement. 


Lacks in integrity. 


6. The number of plaintext message 


units per second that can be 
transmitted is more. 


It is widely put to use . 
Message would be sent faster 


Public key Crypto system 


Once enciphering key K, is 
known it is hard to find the 
deciphering key K) to decipher, 
the message. 

Time required is less in 
comparison to classical 
cryptosystem. 


The authentication of the 
communication is maintained. 
The signature of the message 
known to the persons can read the 
message. 


In this system for sending 
message tend to be slower to 
implement. 


It has integrity i.e. the recipient 
of a message should be able to 
determine that the message has 
not been modified in transit. 


The number of plaintext message 
unit per second that can be 
transmitted is less. 


It is not widely put to use. 


8. Message would not be sent faster. 


Public key cryptography has found numerous applications: 


1. Paper documents such as checks, stocks, lottery tickets can be 
authenticated using public key techniques. A document is assigned a 
unique digital signature based on fiber patterns of the paper and the 
contents of the document. The signature is encoded with a private 
key and the resulting cipher is affixed to the document. Any one can 
verity the authenticity of the document by using an embedded 


public key. 
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2. Public key techniques are now used in smart card, digital cash other 
types of electronic banking and commerce . 


5.3. THE RSA CRYPTOSYSTEM 


The RSA cryptosystem is one of the most popular public—key cryptosystem. 
It was invented by R.L. Rivest, A. Shamir and L.M. Adleman in 1978 The 
success of “RSA” cryptosystem and most popular public key cryptosystem , is 
based on the tremendous difficulty of factoring. 


We now describe how RSA works. Each user first choose two extremely 
large prime numbers p and q and set n = pq, knowing the factorization of n, it 
is easy to compute ¢ (n) = (p—1) (q-1) = pq+ 1-p-—q=n+1-—p-—q. Next, 
the user randomly choose an integer e between 1 and @ (n) such that ged(e, 
(n)) =1. Thus each user A chooses two primes Pa and Qa and a random 
number e, which has no common factor with (pa—1) (qa—1). Next , A computes 
Na = Pa GA, P(N,A) = Na+! —pa-qa and the multiplication inverse of e, modulo 
(na). da det Onet mod @ (na). Then make public and is placed in telephone 
directory the enciphering key Kg,4 =(na, ea) and conceals the deciphering key 
Kp,a= (na, da). Notice that when ng is openly revealed, the listed public key 
does not mention the factors pa and qa of na. 


The enciphering transformation is the map 
f: Z/ngZ — Z/nZ given by f (P) = P® (mod na). 
The deciphering transformation is the map f from Z/n,Z to it self 
given by 
f (C) = C4 (mod na). 
f and f~! are inverse of each other because of our choice of da. 
To work with it is assumed that the plaintext number M < na, where na is 
the enciphering modulus . If the message is too length to be handled as a single 
number M < na, then M can be broken up into blocks of digits Mj, Mo..... M; 


of the appropriate size . Each block would be encrypted separately. We will 
illustrate RSA system by means of example. 

Example 1: Let us choose N = 26, Let the plaintext consists of trigraphs 
and ciphertext consist of four—graphs in the usual 26 letter alphabet. we want to 
send the message “YES” to a user A with enciphering key (na, ea) = (46927, 
39423), we first find numerical equivalent of “YES” i.e. Y = 24, E=4,S= 18 
24.267 + 4 26+18 = 16346 and then compute 

Ps (mod m) = 163439423 (mod 46927) 
which is 21166 = 1.267 + 5.267 + 5.26? + 8.26 + 2 = “BFIC”. 
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To decipher the message the recipient knows the deciphering key 
(na, da) = (46927, 26767) = 26767 and so compute 
C4, (mod na) = 21166) (mod 46927) = 16346 
= 24.267 + 4.26 + 18 = “YES”. 


The user A generates his key like this first he multiplies the primes Pa = 
281 and Qa = 167 to get na. Then he chooses e, at random so that 


. ged (eq P (na)) = 1. 


Then he chooses da such that e, da = 1 (mod @ (na)) . The number pa, 
qa, da remain secret. 


Example 2 : To encrypt the message “NO WAY” by RSA system. 
First select two small primes p= 29, q=53. Then our enciphering modulus 
n = pq = 29.53 = 1537, 
@ (n) = 28.52 = 1457 
choose the exponent e = 47 such that 
gcd (47, 1457) =1. 


Find the inverse of e i.e. e7!= d such that 


ead = 1 (mod 1457) 
ie. 47.d = 1 (mod 1457) 
=> a3) 


Now to encrypt the message M = “NO WAY”. 


The numerical equivalent of plaintext M in 26 — letter alphabet A~Z with 
numerical equivalent (1 to 26) M = 141500230125. 


As M is large split M into blocks of three digits. The first block, 141, 
encrypt as the ciphertext number 14147 = 658 (mod 1537) on the other hand 
knowing the recovery exponent d = 31 the recipient would begin to recover the 
first block of the plaintext number 6582! = 141 (mod 1537) . The total ciphertext 
of our message M is 0658 1408 1250 1252. 


Remark : This method is most secure in the sense that it is not feasible to 
recover the plaintext M from the information assumed to the know to a third 
party, the listed public-key (na, eq). The method is to factorize ng (huge number) 
then d can be calculated from @ (na) = (pa—!) (qa—1) and ea. Factoring a large 
number is very difficult even in computer. 


There are other methods of public key cryptography. They are 
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nie ae a 


Discrete log method 
The ElGamal cryptosystem. 
The Massey—Omura cryptosystem. 


The knapsack problem we are not discussing in the present text. 
However in the last chapter as application we will study Discrete log 
method and the ElGamal crypto system. 


EXERCISES 


1. Encrypt the message “NUMBER THEORY” using Caesar cipher. 


Using the linear cipher C = Sp + 11 (mod 26), encrypt the message 
“READ NUMBER THEORY”. 


If n = pq = 274279 and @ (n) = 272376, find prime p and q. 


4. If the enciphering key in a RSA system (n,e) = (3233, 37). Find the 


recovery exponent . 


Decipher the message TZSVIW JQBVMIJ AL MVOOVI; which was 
produced using the cipher C = 3p + 7 (mod 26). 


Suppose that n = 10088821 is a product of two distinct primes, and 
@ (n) = 1008 2272. Determine the prime factor of n. 
Hints: p +q=n- (n) +1 
p-q =[ (p+q)? — 4n]!?. 
If the modulus in RSA system is n= 1146115723 and encrypting key 


e = 67, compute __ the deciphering key and decrypt the following 
cipher and recover the plaintext. 474786165 , 121618407. 


eo 


PRIMITIVE ROOTS AND INDICES 


6.1. PRIMITIVE ROOTS 

We define the order, primitive roots of an integer modulo n which has 
application in cryptography specially in primality testing. 

DEFINITION 1: Let a and n be integers such that (a, n) = 1. Then the 
order of a modulo n, denoted by ord , (a) is the smallest positive integer k such 
that 


(1) ak =1 (mod n). 
Example 1: The order of 3 modulo 5 is 4. 
we have 3 =3(mod 5) 
32 =4 (mod 5) 
33 =2(mod 5) 
34 = 1 (mod 5). 
Example 2 : The order of 2 mod 17 is 8 and the order of 5 mod 19 is 9. 
2 =2 (mod 17) 5 =5 (mod 19) 
2? =4 (mod 17) 5? = 9 (mod 19) 
23 =8 (mod 17) 5° =11 (mod 19) 


24 = 16 (mod 17) 
25 = 15 (mod 17) 
2° = 13 (mod 17) 
27 =9 (mod 17) 
28 = 1 (mod 17) 


THEOREM 1: Givenn®>1 and (a, n)= 1. Ifa has order k modulo n then 


54 = 17 (mod 19) 
5° = 16 (mod 19) 
56 =7 (mod 19) 
57 = 16 (mod 19) 
58 = 4 (mod 19) 
59 =1 (mod 19). 


(i) aieal (mod n), if, and only if i =j (mod k). 
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(ii) al=1 (mod n), if and only if i= 0 (mod k) that is ki. 
In particular k| @(n). 


PROOF OF THE THEOREM : We will first prove (i). If ai =al (modn), 
then a’ = 1 (mod n) by Euclideans algorithm we write. 


i-j =qk+r, where O<r<k. 


Then 1 ald = adk* = a (mod n) since a has order k. 
So, r =0 and i =j (mod k). 

Conversely if i =j (mod k) then i —j = qk. 

So aid = a%k = (ak)1= 1 (mod n) 

Hence al =al (mod n). 


Proof of (iii) follows from (i). 
Proof of (ii) If a=] (mod n) then i =k. because k is the order a modulo n, 


we write i =kq+r,0<r<k, 
Now ai = akatr = aka gh = (aka at 
= 19a! =a =a! (mod n). 
So ai = 1 (mod n) implies that a" = 1 (mod n) 


which is impossible since 0 <r<k 
Hence r =Oie. i=kq. 
Hence k |i. 
Conversely if i = 0 (mod k) i.e. k.| i we write i = kq. Then we get 

al = akd = (ak)4 = 1 (mod n).. 
By Euler —Fermat’s theorem we know, if (a, n) = 1, 

a?) = | (mod n). 

By (ii) it follow that k| @ (n) . Since k is the order r of a modulo k. Hence 
proved. 


THEOREM 2: If the integer a has orderk modulo n and h > 0. then ah 
has order 


k/ ged (h, k). 
PROOF : Let d = ged (h, k). Then we write h = hyd and k = kyd with ged 
(hy, ky) = 1. 
Clearly 
(aby = (ah 4)k/d = (akyhy = 1 (mod n). 
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If a® is assumed to have order r mod n, then we have rk. On the other 
hand , since a has order k mod n, the congruence 

alt = (ah) = 1 (mod n) 
implies that k| hr, in other words kjd | hydr or k; |hyr. But ged (hy, k)) =1 
and therefore kj|r . This gives 
tr =k; =k/d =k/ gcd (h, k). 

This completes the proof of the theorem. 

Corollary : Let a has order k modulo n. Then a" also has order k if and 
only if 

gcd (h,k) = 1. 
The proof follows directly from the above theorem by taking d = 1. 


DEFINITION 2 : (Primitive Root) If the order of a mod n is ®(n) then a 
is called a primitive root of n or a primitive root modulo n. 


The statement that a is a primitive root of n implies the following : 

(a) (a,n)=1 

(b) a = 1 (mod n) 

(c) a" = 1 (mod n), 0<h<Q(n). 

Conversely (a), (b), (c) imply that a is a primitive root of n . It follows 
from the definition. 

Example 1 : Show that 2 is a primitive root of 11. 


Solution : If a4 = | (mod n) then d divides @ (11). The divisor of @ (11) 
= 10 are 2, 5 and 10. 


We then find 
2? =4 (mod 11) 
25 =-1 (mod 11) 
2!0 = 1 (mod 11). 


So the smallest integer x which satisfies 2% = 1 (mod 11) is 10. This 
implies 2 is a primitive root of modulo 11. 


Example 2 : Show that 5 is a primitive root of 18. 
Solution : o (18)=6=2 x3. Hence the divisors of ~ (18) are 2, 3, and 


Now 
5? =7(mod 18), 5° =—1 (mod 18), 5°= 1 (mod 18) 
It follow that 5 is a primitive root of 18. 
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THEOREM 3 : Let (a, n) = | then a is a primitive root of if and only if 
(2) a%/P_ 1 (mod n) 
for every prime divisor p of @(n). 
PROOF : Let a be such that (2) holds i.e. 
a?y/P 1 (mod p) 


for every prime divisor p of @ (n). Let us assume that under this condition a is 
not a primitive root of n. Then it follows that the order a is some integer k less 
than ¢(n). This implies that k divides p(n). Thus g(n) /k is an integer and is 
therefore divided by some prime divisor p of ¢ (n). 


Hence 
a(n — (ak) (9) /KP = | (mod n) 
because ak = 1 (mod n). This contradision (2) alone . 
Let a be a primitive root of n. Then it follows that 
a?) = | (mod n) and a" # 1 (mod n). 
This means that a?/P # 1 (mod n) for every prime divisor p of @ (n). 
Example 1 : Find all primitive roots of 19. 
Solution : 9 (19) = 18= 2x3? .So2,3 are only prime divisor of p(n). But 
p19) _ 18 weend p19) _ 18 Ig 

3 &} 2 2 

So , ais a primitive root of 19 if and only if a® # 1 (mod 19) and a #1 


(mod 19). Letting a = 2, 3, ...18 in succession we find the following modulo 


19. 


26 =7 ?? =-1 Primitive root 
Boe 7 39 =-] Primitive root 
46 211 4 =1 
Seis 59 =1 
6811 6x=al 
obs Pp = 
soi See 
9° =11 99 =1 


10° «11 10° =-1 Primtive root 
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12° = 129 =-1 

13° =11 139 =-1 Primitive root 
4G he 14? =-1 Primitive root 
156 =11 159 =-1 Primitive root 
16° = 16? =1 

17° =7 179 =1 

18° = 189 =-1 


It follow that 2, 3, 10, 13, 14 and 15 are primitive roots modulo 19. 

Exercise : Find all primitive roots of 15, 17; 

Example 2 : IfF,= 22" 44 »N> lisa prime, then 2 is not a primitive root 
of F,. 

1 

Solution : Since2?™ -1= (22" +1)(22" 1) 

we have g2nt a (mod F,) 

which implies that the order of 2 modulo F, does not exceed 2"*!- But if 
F, is assumed to be prime, 

(Fn) = Fy -1 = 2?" 

and since 22" > 2"*!, whenever n> 1. 

Thus the order of 2 modulo F, is smaller than O(F,); ie 2 can not be a 
primitive root of F,. 

But 2 is a primitive root 5 = F,. 

THEOREM 4: Let ged (a, n) = 1 and let a], a2... Ag(n) be the positive 
integer less than n and relatively prime to n. If ais a primitive root of n, then a, 
a?,a%™™ are congruent modulo n to ay, ap... Ag(n) in some order. 

PROOF : Since (a, n) = 1 the same is true for all powers of a; hence, 

each ak = aj (mod n). The @ (n) numbers in the set {a, a2... a?) are 
incongruent modulo n. Hence these powers must represent the integer aj, ap, 
+++ Ag(n) - 

Corollary 1: If n has a primitive root, then it has exactly @ (@(n)) of 
them. 


PROOF : Suppose that a is a primitive root of n. By the theorem, any 
other primitive root of n is found among member of the set {a,a”,..a°™), But 
the number of powers aX, 1 <k < 9(n) which have order 9(n) is equal to the 
number of integer k for which gcd ( k, g(n)) = 1; there are @ (@(n)) such 
integers, hence @((p(n)) primitive roots of n. 
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Example : Take a = 2 and n =9, then 


9(9) =6, the first 6 powers of 2 i.e. 2, 27, 23, 24, 25, 2° must be congruent 
modulo 9, in some order to the positive integers less than 9 and relatively prime 
to it. These integers less than 9 and relatively prime to 9 are 1, 2, 4, 5,7, 8 and 


2! =2 (mod 9) 
2? =4 (mod 9) 
23 =8 (mod 9) 
24 =7 (mod 9) 
2° =5 (mod 9) 
2° = 1 (mod 9). 


There are ~ (@(9) = @ (6) = 2, primitive roots of 9. These are the integers 
2 and 5. 


THEOREM 5: Let a be a primitive root of n and let a; = a (mod n). 
Then a, is also a primitive root of n. 


PROOF : The order of a (mod n) is ¢(n). Hence the order of a; (mod n) is 
¢(n). This implies that a; is a primitive root of n. Hence proved. 


6.2. REDUCED RESIDUE SYSTEM. 


THEOREM 6: Let (a, n) = 1. Then ais a primitive root modulo n if , and 
only if the numbers 


(3) a, a2, ..... a9) 
form a reduced residue system modulo n. 


PROOF : If a is a primitive root of n the number in (3) are incongruent 
modulo n since there are ~(n) such numbers they form a reduced system modulo: 
n. 


Conversely, if the numbers in (3) form a reduced residue system, then 
a?) =] (mod n). 


But no smaller power is congruent to 1, so a is a primitive root. Hence 
proved . 


If n has a primitive root then each reduced residue system modulo n can be 
expressed as a geometric progression. But the primitive root exists only for the 
following modulo: 


nel 42;, 22, p* and 2pk 
where p is an odd prime and k > 1. 


The case n= | is trivial For n = 2, the number | is a primitive root. 
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For n= 4, ~ (4) =2 aad 3?=1 (mod 4), so 3 is a primitive root (mod 4). 
We will show that there are now primitive root modulo 2 it k > 3. 
THEOREM 7: For k > 3, the integer 2* has no primitive root. 
PROOF : To show that if ais an odd integer, then for k > 3 


(4) a? =1 (mod 2%), 
If k =3, (4) becomes 
a? = 1 (mod 8) which is true for a= eB ar 


Assume that (4) holds for integer k, i.e. aout = 1 (mod 2) 


equivalently 
hess = 1 +m 2K where mis an integer. 
Squaring both sides we get 
at = (a2)? = 4 mak)? 


= 14+2(m25) + (m2ky? 
=1+24 Qn +m? 2k!) 
= 1 (mod 2+!) 
So (4) holds for k +i and hence for all k > 3. 
Now the integers which are relative prime to 2 are the odd integer; also 
o(2') = 21 Tf ais an odd integer and k>3, 


k , 
a??? = 1 (mod 24) 
and , consequently there are no primitive roots of 2*. 


THEOREM 8: If gcd (m,n) =1, where m>2 andn> 2, then the integer 
mn has no primitive root. 


PROOF : Consider any integer a for which (a, mn) = 1, then ged (a, m) = 
1 and ged (a, n) = 1, put h = Iem( g(m), 9 (n) ) and d = ged (~ (m), ~ (n) ). 
Since @ (m) and @ (n) are both even, d> 2. 


d gcd (a, b) 


By Euler’s Theorem a®™) = 1 (mod m) 


h= (mm) of) ~~ ot) [sine cm (a, b) = = 
2 


al = (rm) pm _ qy pina 


= | (mod m). 
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Similarly ab =1 (mod n). 
Since gcd (m,n) = 1 These two imply that 
al =] (mod mn). 
Hence there can be no primitive root of mn. 


6.3. PRIMITIVE ROOTS MODULO PRIME 
We now determine all integers that have primitive roots belonging to them. 
We prove the following theorem. 


THEOREM 9 : There exists at least one primitive root modulo each 
prime p 2 3. 

PROOF : Let p be a prime 2 3. To find integer that have order 
9(p) = p -1 (mod p). 

If ais any integer having order n mod p, then (a, p) = 1, implies 

aP-! =] (mod p) (Fermat’s Theorem) Hence n | p-1. 

Conversely, for any divisor m of p—1 the poynomial congurence 

(5) x™ = 1 (mod p) 

has at most m mutually incongruent solutions. Let b be an integer having 


order m (mod p). Then b is a solution of (5) . In fact, 1, b, b2,..b™! are all the 
solutions of (5) (modulo p). 


The congruence (5) can not have any other solution other than 1, b, b2, ... 
b™!. Hence any integer a having order m (mod p) must be a power of b. If c= 
b!, c has order m (mod p) < (r, m) = 1. Thus only ¢ (m) integers among 1, b, 
b? ... b™-! have order m (mod p). 


That is the number of integer having order m (mod p) is @ (m), if there 
exists an integer having order m (mod p). 

Let A, = number of integer k, 1 <k < p—1 which have order s (mod p) and 
if there is no integer having order's (mod p) then 


Ag = (0). Since each integer k, 1 <k <p—1 has some order m (mod p) then 
m|p-l. 


Hence 
Polis! 2) Ag 
slp-1 
p-l= = Qs) 
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Hence 
© £ As= XZ gQ(s)=p-l. 
slp-l slp-1 


If A, > 0 then A, = 9(s) otherwise A, < @ (s) . From (6) we get A, = @ (s) 
for all s. 


@ (pl) =A,_1 ie Ap_1 = @ (p-1) implies there exists at least one primitive 
root (mod p) for each prime p > 3. 


Example 1: Take p = 17. 

p-1 = 16 Divisors of 16 are 1, 2, 22, 23, ae 

Integer having order 1 (mod 17) is 1 and @(1) = Ay, 

order 2 (mod 17) is 16 since 2!6 = 1 (mod 17) and @ (2) = Ap. 

Order 4 (mod 17) is (4, 13) and p(4) = 2 =A 4; order 8 (mod 17) is (2, 8, 


9,12) and @ (8)=4= Ag; and order 16 (mod 17) is { 3, 5, 6, 7, 10, 11, 14, 
13} 


and 9 (16) =8=Aje. 
Thus p = 17 has 8 primitive roots belonging to it. 


6.4. THE EXISTENCE OF PRIMITIVE ROOTS MOD pk. 

Consider the case m = px , where p is an odd prime and k > 2. To find 
primitive roots mod p*. Let a be such a primitive root mod p. To see whether a 
is primitive root mod p’. Now a?! = 1 (mod p), and since 9 (p”) = p (p-1) > 
p-l, ais not a primitive root mod p? if a P~! = 1 (mod p’). Therefore 

(7) aP-! 1 (mod p”) 

is a necessary conditions for a primitive root a mod p to be a primitive 
root mod p? condition (7) is also sufficient for a to be primitive root mod Pp, 
and also mod p* for k > 2 we have the following theorem. 

THEOREM 10 : Let p be an odd prime. Then (i) if ais a primitive root 
mod p then ais also a primitive root mod p* for all k> 1 if and only if (7) holds. 


(ii) There exists at least one primitive root a.mod p which satisfies (7), 
hence there exists at least one primitive root mod p*, if k > 2. 


PROOF : Proof of (ii) Let a be a primitive root mod p. If a?! = 1 
(mod p?) there is nothing to prove. On the other hand if a?~! = 1 (mod p*) then 
aj =a +p is another primitive root modulo p, satisfying a>! x 1 (mod p’) 


because 


ayP! = (atp)P-! = aP! + (p-1) aP? p + sp? 
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= aP-! + (p? -p) a?-? (mod p2) 
=1-p a? (mod p?). 
Since the second term can not be divisible by p* because 
if pa?! =0 (mod p2) 
then we have a?-? = 0 (mod p?) contradicting the fact that a is a primitive 
root mod p. 
Hence ajP-! » 1 (mod p’). 
Next to prove (i), let a be a primitive root modulo p. If this a is a primitive 
root mod p¥ for all k > 1, then it is primitive root mod p* which implies (7 ) is 
fo part : suppose that a is a primitive root mod p which satisfies 


(7). To show that a is a primitive root mod p* for all k > 2. Let r be the order of 
a mod p* Then to show that r= @ (p*). Since af = 1 (mod pk), 


we have a’ = 1 (mod Pp) so ((p) | r. We write 
(8) r= q g(p). 

Nowr| 9 (p¥) so. q @ (p) | 9 (pS) 

But 0 (PX) =p* (p-t). 

Hence 4 (p-1) |p"! (p-1) 


which means q | p*-! Therefore q=p* 
where s < k—1; and (8) becomes r = p* (p-1). 


If we prove that s = k-1 then r=@ (p*) and the proof is complete. Suppose 
it is not then s<k—2 and we have r=p% (p—1) | p*~ (p-l1) i.e. (p}) =mr. 

Thus, since @ (p~!) is a multiple of r, this implies 

k-1 

AWE it 1, a™ = (a")™ = 1 (mod pk) since a’ = 1 (mod p*) which is a 
contradiction follows from the following theorem. 

THEOREM 11 : Let a be a primitive root modulo p such that 

(9) aP-!_ # 1 (mod p?). 

Then for every k > 2 we have 


k-1 
(10) a") # 1 (mod pk). 


PROOF : The proof is by induction onk. Fork = 2, (10) reduces to (9). 
Suppose (10) holds then 


k-1 
a® ) =1 (mod p*-!) (Euler-Fermat’s Theorem) 
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k-1 
so a?) 1 + mp! 
where p+ m. Raising both sides to p power we get 


oP") =(1+ mp*!)p 

= 1+ mpk + m? p (p-1)/2 p24) + tp) 
now 2k-1 >k+1and3k-3>k+1 since k 22. 
Hence we get 


k 
are) — ihe mp* (mod pk!) 


where p+m. Hence 


k 
a?) # 1 (mod pX*!), 
So (10) holds for k + 1 if it holds for k. This completes the proof of the 
theorem. 
6.5. THE EXISTENCE OF PRIMITIVE ROOTS MODULO 2p* 
THEOREM sl If p is an odd prime and k 2 | there exists Hee primi- 
tive roots a modulo p*. Each such a is alsoa a ai root mod 2pk. 


PROOF : a is a primitive root mod p* soisa + p* as Sia earlier. 
One of aor a+p* is odd . Hence oe primitive roots modulo p* CG exist. 
Let a be an Pe primitive root mod p K and let r be order of a mod 2pk. To show 
thatr= 9 (2p* ). 

Now r divides @ (2p*), and ¢ (2p*) = o (2) @ (p*) o(p*). 

So r also divides  (p). Again a‘ = 1 (mod 2p). 

so a‘ = 1 (mod p*). Hence (pX) | r since a is primitive fo modulo pk, 
Therefore r= (pk) = @ (2p*), so a is a primitive root mod 2pk. 

THEOREM 13: Given m2 1 where m is not of the form m = 1, 2, p* or 
2pk where p is an odd prime. then for any a with (a, m) = 1 we have 

a 0m)? = | (mod m). 

So there are no primitive root mod m. 

PROOF: we have shown earlier that there are no primitive roots mod ok 
ifk >3. 

Since m= 1, mhas following factorization : 

m = 2 pik. ps, 


where pj, is are odd primes, s 2 1, andk 2 0. Since m is not of the form I, 
2, p* or 2pk we have k>2ifs=land s 22ifk=Oorl. 
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Now 


o(m) = 9 (24) 9 Pi")... CPs*)- 
Let (a, m) = 1 To prove that a o(m)/2 — | (mod m) Let b be a primitive root 
mod p;* and choose r such that 
a =b' (mod p;*). 
Then we have 


(11) ae = pretm2 = pto(Pky (mod p;") 


where 
t =r 24) o(p2*) ..- 9 (Pst)/2. 
If k>2 the factor p (2k) is even and hence t is an integer. If k =0 or | then 
s >2and the factor ~ (p2¥) is even so t is an integer in this case. Hence (11) 
gives us 


av(m)/2 = 1 (mod p;*). 
Similarly we get 
(12) a0(m)/2 = | (mod p;*) 


for each i = 1,2,... s. To show that (12) holds mod ok fk > 3 the 
condition 


(a, m)= 1 requires a to be odd and we get by previous theorem 


a2 21 (mod 2), 
Since ¢ (2) |p (m) this gives 
(13)a°™/2 = 1 (mod 24), 
for k > 3. 
If k <2 we have 


k 
(14) a? = 1 (mod 24), 


But s 2 1 so @ (m) = 0 (2) @ (py)... (pe) = 21 @ (2%), where | is an 
integer Hence @ (2*)| @ (m)/2 and (14) implies (13) for k <2. Hence (13) holds 
for all k. Multiplying (13) and (12) we get _a?™? = 1 (mod m ) which proves 
that a can not be a primitive root mod m. 

Example 1: Let p =5 Find a primitive root mod 52. 

Solution : We know 2 is a primitive root mod 5. Since 2 = 2 (mod 5), Be 
= 4 (mod 5) 


23 =3 (mod 5), 24 = 1 (mod 5). 
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Again 2=1 (mod 52) and 270=1 (mod 52) 2 is a primitive root (mod 52), 
Exercise 1 : Show that 3 is a primitive roots mod 5? . 


Exercise 2 : Determine all primitive roots of 32, 33, 34, 3. 


6.6. INDICES. 


DEFINITION : Let a be a primitive root mod m. For any integer b 
coprime to m if b= ak (mod m), then k is called as the index of b modulo m 
relative to a. We write. 


Ind, b =k if b = aX (mod m) or Indb =k. 
Indices are like logarithms and their properties are also like logarithmic 
properties. 
Example 2 : 2 is a primitive root mod 5 and 2! = 2, 2? = 4, 23 =3, 24= 
1(mod 5). 
It follows that 
ind) 1 = 4, ind2 2 = 1, indy3 = 3, ind24 = 2. 
We observe that indices of integers which are congruent modulo n are 
equal. 


If a =b (modn), where (a,n) = (b,n) = 1, 
since rinda = 4 (mod n) and r™4> = b (mod n) 
we have rind a — ind b (mod n) 


THEOREM 14: Letrbe a primitive root of n. If (a, n) = (b, n) = 1 we 
have 

(a) ind (ab) = ind a + ind b (mod @(n) ) 

(b) ind a" = n ind a (mod @ (n) ) ifn >=1 

(c) ind 1 =O and indr=1. ifn>2. 


PROOF : By definition of index, 
rind a = a (mod n) 
and rind b = & (mod n). Multiplying these congruences together we get 
rind a+indb ... ab (mod n) 
But rind (@b) = ab (mod n), so that 


rind a+indb — rind( ab) (mod n). 


It may happen that ind a + ind b exceeds @ (n). 
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This gives no problem for by theorem the last equation holds if and only if 
the order are congruent modulo 9(n) ; i.e. 
ind a + ind b = ind (a b) (mod g(n) ). 
To prove (b). 


it ite ak (mod n) 
while rk ind a — (pind ak — 4k (mod n), hence 


rind a kind a (mod n) 

As in case (a) we have ind ak=kinda (mod ¢(n) ). 
The proof of (c), follow as: 

P=1 (mod n), we have ind (1) = 0 

a! =a (mod n) > ind, (a) = 1. 

6.7. APPLICATION OF INDICES IN SOLVING CONGRUENCE. 
The theory of indices can be used to solve certain types of congruence. 
For example consider the binomial congruence 
xk =a (mod n) 


where n is a positive integer having a primitive root and gcd (a, n) = 1 By 
theorem 14 this congruence is equivalent to the linear congruence 


k ind x = ind a (mod 9 (n)). 


If d = ged (k, ¢(n) ) and d-+ind a, there is no solution . But if dlind a, then 
there are exactly d values of ind x which will satisfy this last congruence, hence 
d incongruent solutions of xk=a (mod n). 


Consider the case k = 2 and n = p. We get the quadratic congruence 
x? =a(mod p). 


This congruence has a solution, if and only if 2 | ind a; when this condi- 
tion is fulfilled . there are exactly two solutions. If r is a primitive root of p, 


then r&(1<k< p-1) runs through integers 1, 2,... p-1, in some order . The 
even powers ofr produces the values of a for which the congruence x2 =a (mod 
p) is solvable. There are precisely (p—1)/2 such choices fora. 


Example 1 : Solve the linear congruence 7x = 2 (mod 9). 
Solution : We know 2 is a primitive root modulo 9. 
Also 2! =2 (mod 9) 24 =7(mod 9) 

2? =4 (mod 9) 2 =5 (mod 9) 

23 = 8 (mod 9) 2° =1 (mod 9). 
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Index of 7 is 4 and 2 is 1. 


Now 7x = 2 (mod 9) is equivalent to 
Ind 7 + Ind x = Ind 2 (mod @ (9)) 
= Ind 2 (mod 6) 


or 4 + Ind x = 1 (mod 6) 
or Ind x =— 3 (mod 6). 
Hencex = 2 (mod 9) (Since — 3 = 3 mod (6)) 
or x =8 (mod 9). 
Thus solutions of 7x = 2 (mod 9) are of the form 9t + 8 fort = 0, +1, +2.... 
Example 2 : Solve the congruence 
11x? = 2 (mod 23). 
Solution : Here p = 23, 5 is a primitive root of 23. Also 


5! =5 (mod 23) 5® =8 (mod 23) 
5? =2 (mod 26) 57 =17 (mod 23) 
53 = 10 (mod 26) 58 = 16 (mod 23) 
54 =4 (mod 23) 5? =11 (mod 23) 
5° = 20 (mod 23) 5!9 =9 (mod 23) 


11 x3 =2 (mod 23) is equivalent to 
Ind 11 +3 Ind x = Ind 2 (mod 22) 


Or 9 +3 Ind x =Ind 2 (mod 22) 
or 3 Ind x =—7 (mod 22) 
or 3 Ind x = 15 (mod 22) 
or Ind x =5 (mod 23) 
Hence x =5° (mod 23) 
or x = 20 (mod 23). 


Thus x = 23t + 20, t= 0, +1, +2, ... are all solutions of the given congru- 
ence. 


Exercise : Solve the congruence 
4x? =7 (mod 13). 


THEOREM 15: Let n be an integer having a primitive root and let ged 
(a,n) = 1, then the congruence x* =a (mod n) has solution if and only if 
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(15) av(n/d — 1 (mod n), 


where d = ged (k, ~(n)); if it has a solution there are exactly d solutions 
modulo n, 


PROOF : a%/4 = } (mod n), implies ~(n)/d Ind a = Ind 1 (mod n) = 0 
(mod n) which holds if and only if d | ind a, which is a necessary and sufficient 
conditions for the congruence xkeg (mod n) to be solvable. 


Corollary : Let p be a prime and gcd (a,b) = 1. Then the congruence x* = 
a (mod p) has a solution if, and only if aP~/4 = | (mod p), where d = gcd (k, p— 
1). 
Example 3 : Solve the congruence 
x =4 (mod 13). 
Here, d = ged (3, ((13)) = gcd (3, 12) = 3. 


So (13)/d =4. Since 44=9 #1 (mod 13), the congruence is 
_ hot solvable. 


6.8. THE DISCRETE LOGARITHM 


DEFINITON: Suppose r is a primitive root modulo n. If r* = y (mod n) 
then the discrete logarithm or index of y (to the base r) is 


ind,(y) = x (mod @(n)). 


\ Example 1 : 3 is a primitive root of 17. We have 38 = —1 (mod 17) and 3!2 
=4(mod 17). 


So ind (—1) = 8 and ind; (4) = 12. 


Example 2 : We use the properties of discrete logarithm to solve the 
ngruence 


7* =4 (mod 17). 

_ Solution ; 3 is a primitive root mod 17, 

Taking the index to the base 3 we get 
ind3 (7*) = ind3 (4) 


or x ind3 (7) = ind; (4) (mod 9(17)). 
Since ind3 (7) = 11 and ind3 (4) = 12 
solving the equation is equivalent to 

11x = 12 (mod 16). 


The solution is x = 4(mod 16), 
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EXERCISES 
Find the index of 5 relative to each of the primitive roots of 13. 


Using theory of indices find the remainder where 34. 5!? is divided 
by 17. 


If r is a primitive root of n, verify that, ind,(-1) = ind,(@(n)) = o(n)/ 
2: 


Solve the congruence x? =5 (mod 13). 

Solve the congruences ‘ 

(i) 7x3 = 3 (mod 11). 

(ii) 4x = 19 (mod 23) 

(iii) ST* = 2 (mod 13). 

Determine whether the congruence x = 13 (mod 23).is solvable. 
For which values of b the congruence 9* = b (mod 13) is solvable.. 
Usinga table of indices for a primitive root of 11, solve the congruence 
(i) 7x3 = 3 (mod 11). 

(ii) 3x* = 5 (mod 11) 

(iii) x8 = 10 (mod 11). 

If rand r’ are both primitive roots of n, show that for ged (a, n= 
inda= (ind,a)(ind,r)(mod ¢(n)). 

Let p be an odd prime. Find all solutions of xP-l = 2 (mod p). 

Let a be a primitive root modulo prime p. Then prove that 

(i) a Ply? =-1 (mod p). 


(ii) Ifa’ is another primitive root modulo p, then aa’ is not a primitive 
root modulo p. 


Let p be an odd prime. Prove that a has order 2 mod p if and only if 
a=-l (mod p). 


Prove that n is a prime if and only if ord,(a) =n —1 for some a. 


If (a, n) = (b,n) = 1 and if (ord,(a), ord,(b)) = 1, prove that ord,(ab) 
= ord,(a)ord,(b). 


Show that 18 is a primitive root modulo 37. Is it also a primitive root 
modulo 37? ? 


oo 


QUADRATIC RESIDUES AND 
QUARATIC RECIPROCITY LAWS 


7.1. QUADRATIC RESIDUES 

In chapter 3, the problem of solving polynomial congruence 

f(x) =0 (mod p) 
are dealt with . Here we will consider quadratic congruence of the form 
(1) x? =a (mod p) 
where p is an odd prime and (a,p) = 1. 
Lagranges theorem tells that a polynomial congruence 

f(x) =a) +a, Xt... +a, x" =0 (mod p), 

(ap) = 1 has atmost n solutions. 


So the quadratic congruence (1) has atmost two solutions. If x is a solu- 
tion so is —x, hence (1) has either no solution or 2 solutions. 


Now consider the general quadratic congruence 
(2) ax? + bx +c = 0 (mod p) 


where p is an odd prime and (a,p) = 1. p is an odd prime implies that 
(4a,p) = 1. Then (2) is equivalent to 


(3) 4a (ax? + bx +c) = 0 (mod p). 
But 4a (ax?+ bx +c) =(2ax + b)? - (b?-4ac). 

So (3) may be expressed as 

(4) (2ax + b)* = (b? — 4ac) (mod p). 
Now put y = 2ax +b and d = b? - 4ac to get 
(5) y? =d(mod p). 


If x =X, (mod p) is a solution of (2) then 
y =2axg+b (mod p) 


152 Quadratic Residues and quaratic Reciprocity Laws 
satisfies the congruence (5). Conversely if y = yg (mod p) is a solution of (5), 
then 

2ax = Y,.—b (mod p) 
can be solved to obtain solution of (2). 


| Thus, the problem of finding a solution to the quadratic congruence (2) is 
| equivalent to that of finding a solution to linear congruence and a quadratic 
| congruence of the form (1). 


It is clear that if x = x, is a solution of (1) and x = p-x, is another solution. 
Example 1 : Solve x? = 5 (mod 29). 
Solution : 


x? = §=5429 =34 =63 =92 =121=112 
| (mod p) (i.e. add multiple of p till we get a square number). 


Hence the required solutions are 

| x =11, 29-11 (mod 29) 
= 11, 18 (mod 29). 
Example 2 : Solve x2=4 (mod 13), 


Solution : 
x? = 4=17 =30 =43 =56 = 69=82 =95 =108=121 =117 
(mod 13) 
So solution are x = 11, 13-11 (mod 29) 
= 11, 2 (mod 29). 
Example 3 : Solve the congruence 
2x? 5x +3 =0(mod 29). 

Solution : The congruence is reduced to y? = d (mod 29) 
where d =b?—4ac=25-24=1 
and to solve the congruence y? = | (mod 29) 
with solution y = 1, 28 (mod 29). 
Next solve the linear congruence 

4x =1-(-5) =6 (mod 29) 

4x =28-(-5) = 33 =4 (mod 29) 

x =6.478! (mod 29) =6.4?7 (mod 29). 

To calculate 4?” (mod 29). 478 = 1 (mod 29). 
=> 47 = 4"! (mod 29). 
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To calculate 47! (mod 29) . 
4.4-| = 1 (mod 29) 
= 4! = 22. 
Hence x = 6.22 (mod 29) = 16 (mod 29) 


=>x = 16 (mod 29) is a solution which satisfies the original quadratic 
congruence also . 


Next 4x =4 (mod 29) 
= x = 1 (mod 29). 


So x = 1 (mod 29) is a solutions of the congruence 4x = 4 (mod 29) hence 
of the original quadratic congruence. 


Hence the two solution are x = 1, 16 (mod 29). 
Exercise 1 : Solve 5x” — 6x +2 =0 (mod 13). 
Exercise 2: Solve x? = 52 (mod 101). 


DEFINITION : If the congruence x? =a (mod p), where pis a prime and 
(a,p) = 1 has a solution then a is said to be a quadratic residue modulo p. We 
write aRp Otherwise a is called quadratic nonresidue modulo p. We write aNp. 


If a= b (mod p ) then (a,p) = (b,p) so ais a quadratic residue modulo p if 
and only if b is a quadratic residue modulo p. 


Example : Consider p = 17. Find all quadratic residues and non residues 
of 17. 


Solution : We find a among [1,2,3,.....1 6] modulo 17 which satisfy the 
congruence 


x2 =a(mod 17). 
The squares of the integer 1, 2, 3,....16 are 


12 = 167 =1 
22 = 15%=4 
32 = 144=9 
42 = 137= 16 
52 = 127=8 
y= = 2 
72= 102 = 15 
S07) 13: 


So the quadratic residues of 17 are 1, 2,4, 8, 13, 15, 16 while non residues 
are 3,5,6,7, 10, 11, 12, 14. 
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Remark : The number of quadratic residue of p are same as the number 
of quadratic non residues. 


Example: If p = 19 then (p-1)/ 2 = (19-1)/2 =9. 
Hence x=] (mod 19) has exactly 9 solutions, namely 
x = 12,22, .....9? (mod 19) 
= 1,4, 9, 16, 6, 17, 11, 7, 5 (mod 19). 


THEOREM 1: If (a,p) = 1 then a®"!? =+ 1 (mod p). 
PROOF : By Fermat’s theorem a?! = 1 (mod p)- 
This ==> (a2 4) (a?-Y/2 41) =0 (mod p) 

=> either a-)/2 _] =0 (mod p) i.e, a) = 1 (mod p) 
or a'?-1)/2 41 =0 (mod p) ie. a? D/2 = _1 (mod p). 


But not both since in that case (ae-D/2 +1)- (alP- 1/2 —1) = 2 would be 
divisible by p which is impossible. 


Hence the theorem is proved. 


THEOREM 2 : The congruence 
(6) x®-)? = 1 (mod p) 


has exactly p-1/2 solutions congruent module p and p-1/2 solutions in- 
congruent modulo p. The congruent solutions are 


x = 17,22, ... (p-1/2)* (mod p). 

PROOF : Let S={ 12, 22, .. (p-1/2)? }. 
If t? is an integer of S, then (t,p) = 1. 
So by Fermat’s theorem we have 

tP! =1 (mod p) 
which => —(t)P"/2 = 1 (mod p). 
Thus every integer of S is a solution. 
All the integers of S are all incongruent (mod p). 


For if u2 =v? (mod p) such that 1 < u<v<(p-1)/2 then it would 
follow that (u - v) (u + v) would be divisible by p. But this is impossible since 
both u - v and u + v are numerically less than p. Moreover (p-1)/2 divides p-1. 
Therefore (6) has exactly (p-1)/2 solutions. 


Since there are p-1/2 solutions of the congruence x? =a (mod p), there are 
exactly p-1/2 incongruent solutions mod p. Hence we have the following . 
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THEOREM 3 : Let p be an odd prime. Then every reduced residue 
system mod p contains exactly (p-1)/2 quadratic residues and exactly (p-1)/2 
quadratic non-residues mod p. The quadratic residues belong to the residue 
classes containing the numbers. 


(1) 12527, 329 tee. ((pstyD)? 
7.2. LEGENDRE’S SYMBOL AND ITS PROPERTIES. 


DEFINITION : Let p bea prime. We define Legendre’s symbol (a/p) as 
follows: 


( A ) +1if aRp 
8 <= 
@) P —1 if aNp. 
(a/p) = 0 if pla. 
Example: (1/p)= 1, p is a prime. 
(a?/p) =1 (8/17) =1 (7/19) = 1. 


(7/11) = 1, since 7 is a quadratic residue modulo 11. 
THEOREM 4: (Euler’s criterion). The congruence 
x2 =a (mod p), (a,p) = 1 
has a solution if and only if 
a(P-D/2 = 1 (mod p). 
PROOF : Let 
a(P-D/2 = 1 (mod p) . 
Then a is solution of 
xP-D/2 = 1 (mod p). 
Therefore a is congruent mod p to one of the integers 13927 vce ((p- 1)/2)?. 
Let this integer be t?. That is t? = a (mod p). Therefore x =t isa solution of 
= a(mod p). 
Converse part : Let the quadratic congruence x? = a (mod p) has a 
solution say 
x= b (mod p). It follows that b? = a (mod p). 
Hence  aP-!/2=(b2)P-!/2 =p! (mod p)=1 (mod p) by Fermat’s theorem. 
Example: Show that x? = 18 (mod 79) is soluble. 
Solution : Herep=79, (p-1)/2 =39, a=18, a?!) = 189 = 1 (mod 79). 


Hence the given congruence is solvable . The solution can be found as in 
previous example, They are x = 27, 52 (mod 79). 
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THEOREM 5: x2=a (mod p), (a,p) = | has no solution if and only if 
a(?-))2 = -1 (mod p). 
PROOF : Suppose a(P-1)/2 = -1 (mod p). 
Then it follow a-!/2 = 1 (mod p). 
Therefore x? = a(mod p) has no solution. 
Conversely suppose x? =a (mod p) be not solvable. 
Then it follow that a(P-1)/2 = | (mod p). 
So a(P-!)/2 = -1 (mod p). 


Example 1. x2 = 10(mod 19) has no solution since 1009-12 = 10° 
= -1 (mod 19). 

Example 2. x?= 10(mod 11) has no solution since 100 1-D/2 = 10° 
=-1 (mod 11). 


THEOREM 6: (Euler’ criterion) x2 =a (mod p), (ap) = 1 is solvable 
if and only if 


a(?-1)/2 = 1 (mod p) and has no solution if and only if 
a(P-1/2 = -1 (mod p). 


Corollary : (Fermat’s theorem). From the above theorem we deduce 
Fermat’s theorem. Because there are two possibilities. The congruence = 
a(mod p) has a solution or has no solution . 


We have either 
a(P-1)/2 = | (mod p) or 
a(P-)/2 = (-1) (mod p). 


Squaring both the sides we obtain 


aP-! = 1 (mod p). 
Since (ap) = + lif aRp 
=-lif aNp 


in Euler’s Criterion we replace the right hand side by (a/p) and we have, 
RESULT : Let p be an odd prime then for all a we have 
(alp) = 4°)? (modip) 
SOME PROPERTIES OF LEGENDRE’S SYMBOL 


THEOREM 7 : Legendre’s symbol (a/p) is a completely multiplicative 
function. 
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PROOF : To prove that (ab/p) = (a/p) (b/p) for all a and b. 
(i) If pla or pb then plab. Now pla => (a/p) =0 or p| b > (b/p) =0. 
and plab => (ab/p) = 0 
Hence (ab/p) = (a/p) (b/p). 
(ii) If p4a and pt b then p| ab and we have 
(ab/p) = (ab) 1? = alP-N? HP-1)?2 ~ (a/p) (b/p) (mod p) 


by theorem 6 But each of (ab/p), (a/p) and (b/p) is 1 or—1 so the difference 
(ab/p) — (a/p)(b/p) is either 0, 2 or —2. 


THEOREM 8 : If a=b (mod p). Then (a/p) = (b/p). 


PROOF : If a is a quadratic residue modulo Pp so is b and if a quadratic 
non residue modulo p then so is b. 


THEOREM 9 : (a;/p) (a/p) .... (ay/p) = (a 2..a,/p). 

PROOF : (aj/p) (ap/p)... (aj/p) =a,P"!/? a??? (mod p) 
= (ay....a,)P-"/2 (mod Pp) 
=(a)...... a;/p) (mod p) 

Since (a;/p), (a9/p) ... (a,/p) are all equal to + 1 or-1. 

Similarly (ay..a,/p)=+ 1 or—1. 

Hence (aj/p) (a/p) ... (ay/p) = (ay a2 ... ay/p). 

THEOREM 10: If (a,p) = 1, then (a2/p) =1 

PROOF : The theorem is trivial since a is a quadratic residue of every p. 

Corollary: (a b’/p) = (a/p). 

PROOF : (ab? /p) = (a/p) (b7/p) = (a/p). 

THEOREM 11: For every odd prime p we have 

lif p=4k+1 


-I/p) = (-1)P/2 = 
(9) Cup = Cl) Ake 


PROOF : By Euler’s Criterion we have (-1/p) = (-1)P-12 (mod p) 
Since the values of both sides of congruence are 1 or —1 the two members 
are equal. 
) That is 
(-I/p) = (-1 yp- 1/2 
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Ifp= 4k +1, CDP? =I = +1 
if p=4k +3, CIP? = Cyt =-1 
Hence proved. 
THEOREM 12 : For every odd prime p we have 


p2-1( lif p=+1(mod 8) 
(10) (2/p)=(-)) 8 , 
, -lifp= +3(mol 8). 


PROOF : we know 


(p-1)=1(-1)' (mod p) 

2.=2(-1)°(mod p) 

p-3=3(-1)' (mod p) 
4 = 4(-1)‘ (modp) 


(A) 
= (p—1)/2(-1)” (mod p), 


where ris either p-1/2 or p- (p-1/2) multiplying together in the set (A) we 
obtain 


2, 4, 6.00 (pel) = (p12) !CD!** (p-1)/2 (mod p) 
> (0-192 (p-1/2)! = (p-1/2) | 1) P? (mod p)- 
Since (p, (p-1/2) !) = 1 canceling ((p-1)/2) ! 
from both sides we obtain 
2(p-1)/2 = (-1)P2-D8 (mod p). 
But by Euler’s criterion 2(p-1)/2 = (2/p) (mod p). 


and since each member is + 1 or—1 the two members are equal complet- 
ing the proof of the theorem. 


7.3. GAUSS’ LEMMA 


We now give another Criterion due to Gauss which involves a simpler 
calculation and applicable for large n. 

THEOREM 13: (Gauss’lemma) Assume (a, p) = 1 and consider the 
least positive residues modulo p of the following (p-1/2) multiples of a. 
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(11) a, 2a, 3a, ...., (p-1/2) a. 
If n denotes the number of these residues which exceed p/2, then 
(a/p) =(-1)?. 


PROOF: Let ry, ro, ... ry denote the residues that exceed p/2, and let s,s 
-+» 8 denote the remaining residues. The r, and s; are all distinct, and non zero. 

Further n +k = (p-1)/2. Now 0< p-rj< p/2, i= 1, 2, ...n, and the numbers 
p-t are distinct. Also no p-r; is an sj for if p-r;, = sj then rj = pa, Sj = 6a, for some 
p,0,1<p< p-1/2,1<o<(p-1)/2, and p - pa=oa (mod p) . Since (a,p) =1 this 
implies a(p+0) = 0, (p+o) = 0 (mod p) which is impossible by the nature of p 
and o. Thus p-rj, p-rp..., p-tp, S}, Sz... S, are all distinct , are all at least 1 and 
less than p/2. 


They are just the integer 1,2, ... (p-1)/2 in some order. Multiplying them 
together we have 
(p-"}) (P-r2) ... (P-tp) 81 82... SK 
= 1.23 ..... p-1/2. 
and then 
(-r1) (12 ) ... Cp) 81 Sp... = 1,2. p-1/2 (mod p) 
> CI! rm... m8] sp... sy = 1.2... p-1/2 (mod p) 
= (-1)" 2a... p-1/2a = 1.2.3... p-1/2 (mod p) 
=> (-1)" a P°? (p-1)/2 | = (p-1/2) ! (mod p) 
Since ( (p-1/2)!, p)= 1, cancelling (p-1)/2 ! from both sides we have 
(-1)"aP-!/2 = 1 (mod p) 
=> (-1)P=aP 2s (a/p) (mod p) by Euler’s criterion. 
Hence (a/p) =(-1)". 


THEOREM 14: Let n denotes the number of those residues which 
exceed p/2 then 


(p-1)/2 
n= &  [ta/p] + (a-1)2"8 (mod 2), 
t=1 


(p-1)/2 
In particular, if nis odd we have n= = [ta/p] (mod 2). 


PROOF : Consider the numbers 
a, 2a, 3a... (p-1/2) a. 
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Take ta and divide it by p then 
ta/p= [ta/p] + {ta/p}, where 0 < {ta/p} < 1. 

So ta= p [ta/p] + p {ta/p} =p [ta/p] +t; , for some t; 
where 0 <t; <p. i 
t; =ta—p [ta/p] is the least positive residue of ta modulo p. Now 

{ty, to, ... t(p-1/2)} = (11, 12 «++. Ty $1, $2--- Sk} 
and —{1,2...p-12} = {01,12 +. tm, S1---Sk}- 
So since (a, p) = 1, whether a is odd or even, we have 

(p-1)/2 p-l/2 
= 


1/2 
ta= > pltapl+?s tj 
t=1 t=l isl 


p-1/2 n k 
= y pltypl+ 2 n+ 2s 
t=1 ist i 
mee 2 ee k 
and Dt=y (pry+ zs 
t=1 i=l Apel 


and hence by subtraction, 


(p-1/2) p-1/2 n 
(al) y t=pC zr [ta/p] -n ) ii fi 

tal t=1 i 

But 
(p-1/2) f 
SE t=14+2+... (p-1/2)=p*1/8. 
t=1 
So we have 


1/2) 
(a-1) 218 = Ne  ttalp] — n (mod 2). 


t=l 
If a is odd, this implies 


(p-1/2) 
n=" > [tap] (mod 2). 
t=1 


If a = 2, it implies n= p?-1/8. 
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Since 
[2t/p] = 0 forO <t< p-1/2 
we get 


(2ip) = (-P-¥8 
which is the theorem 12. 
7.4. QUADRATIC RECIPROCITY LAW AND ITS APPLICATION. 
THEOREM 15 : If p and q are distinct odd primes, then 


(12) (p/q) (/p) = (-1) &D D4 
PROOF : By Gauss Lemma (theorem 13) and theorem 14 we have 
(q/p) =(-1)" 
where 
(p-1/2) 
n= 2 [tq/p] (mod 2). 
t=1 
Similarly (p/q) = (-1)™, 
where 
(q-1/2) 
m= 2 _ [sp/q] (mod 2). 
=1 
Hence (p/q) (q/p) = (-™ 
(p-1/2) (q-1/2) 
where m+n= 2 [tq/p]+ Z _ [sp/q]. 
3 s=l 


Let s be the set of all pairs of integers (x,y) satisfying 

1<x<(p-1)/2,1<y<(q-1)/2. 

The set has (p-1) (q - 1) /4 members. Separate the set into two mutually 
exclusive subsets S; and Sj according as qx > py or qx <py. There are no pairs 
(x,y) in S such that qx = by S, is the set of all pairs (x,y) such that 

1< x < (p-1)/2, 

l<y<qxip. 


(p-1)/2 
The number of pairs in S; is seen to be = [qx/p]. Similarly the 
x=] 
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number of pairs (x,y) in S7 s.t 1 <y $q-1/2, 
1<x< py/qis 


(q-1)/2 
a [py/q] . Thus we have m +n = (p-1)/2 (q-1)/2. 
y= 


() [2] = (-1?-DO 


THEOREM 16: If 8k +7 isa prime then it divides May43 . 


Hence 


PROOF : We have proved in theorem 12 that 2 is a quadratic residue of 
prime of the form 8k-1, i.e. of the form 8k+7. Hence by Euler’s criterion 


8k+7-1/2 = | (mod 8k+7). 
This implies 
24k+3 = 1 (mod 8k + 7) 
=> 24k+3 _1 = 0 (mod 8k + 7) 
ie. 8k +7|Mar3 


This proves the theorem. 


Example : Apply the above theorem to find a factor each of some of the 
Mersenne numbers M, where p is a prime < 257. 


Solution : Since by the theorem 8k + 7 divides Max43 


k 8k +7 4k +3 Factor of Max +3 
p 23 11 Hence 23 | Mj} 
5 47 23 47 | M3 

20 167 33 167 | Me3 

32 263 131 263 | My31 

44 359 179 359] M79 

47 383 191 383 | Mioi 

59 479 239 479 | Mo39 

62 503 251 503 | My51. 


THEOREM 17: - 2 isa quadratic residue of p if and only if p is of the 
form 8k+1, or 8k+3 


Quadratic Residues and quaratic Reciprocity Laws 163 
PROOF : (-2/p) = (-1/p) (2/p). 
| (-2/p) = (1) (1) = 1lifp=8k+1 
| =(-1) (-1)=1 if p=8k+3 
=(1) (-1) =-1lif p=8k+5 
=(-1) (1) =-1 if p=8k+7. 
The theorem is therefore proved. 


THEOREM 18: 3 is a quadratic residue of p if and only if p is of the 
form 12k + 1. 


PROOF : Every prime p > 3 has one of the forms 12k + 1, 12k-1, 12k +5 
and 12k — 5. Let p= 2k + 1. 


Gee) 


If p= 12k-1 = 4 (3k—-1) +3 then 


()- 2-043) 


If p= 12k +5 =4 (3k+1)+1. Then 


()-(5")-G) 


If p = 12k - 5 = 4 (3k-2) +3 . Then 


)-()-)s 


This proves the theorem. 


Example : -3 is a quadratic residue of p if and only if p is of the form 6k 
+ 1 and quadratic non-residue if and only if p is of the form 6k + 5. 


Solution: p is odd , hence 
(13) p= 1 (mod 2) 
(-3/p) = (-1/p) (3/p) 
= (p/3) if p=4k +1 ‘ 
(-3/p) = (-1/p) (3/p) = (p/3) if p = 4k +3 
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It follows that (-3/p) = 1 if and only if p is a quadratic residue of 3. This 
implies 


(14) p=! (mod 3). 
From (13) and (14) we get p = 1 (mod 6 ) i.e, 
p =6k+1 


-3 is a quadratic non-residue of a prime if and only if p is the form 
6k + 5 or 6k + 1. 


Example : 5 is a quadratic residue of a prime p if and only if p is of the 
form 10k+1. 


Solution : Every odd prime p has one of the forms 10k + 1 and 10k + 3. 
Let p= 10k + 1. 


Then p= 10k + 1. Then 


8-042) 


Let p = 10k — 1. Then 


8-08: 


Let p = 10k +3 . Then 


2) e) (a) 


Let p= 10k-—3. Then 


: =) seo ‘ ge B= =-1. 


Exercise 1: Prove that 5 is a quadratic non-residue of a prime p if and 
only if p is of the form 10k + 3. 


Exercise 2 : Prove that —5 is a quadratic residue p if and only if p is of the 
form 20k + 1, 20k + 3, 20k +7 or 20k +9. 


Exercise 3 : Prove that 7 is a quadratic residue of p if and only if p is of the 
form 28k + 1, 28k + 3 or 28k + 9. 


Exercise 4 : Prove that 10 is a quadratic residue of p if and only if p is of 
the form 40k + 1, 40k + 3 40k + 9 or 40k + 13. 


Example : Find all quadratic residues of 35. 
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Solution : 35 = 5x7 and (5,7) = 1. Therefore the quadratic residues of 35 
are those integers, less than 35, which are quadratic residues of both 5S and7 . 
The quadratic residues of 5 which are less than 35 are 


1,4, °6, 9; 11, Ta, M6; 19) 21, 24; 26, 29, 31, and 34. 
The quadratic residues of 7 which are less than 35 are 
2,4, Sy ON AMO, 18), 22," 23, 25,429) 30, and!32. 


Hence the quadratic residues of 35 are those integers which are common 
to both the above lists, namely 


1, 4, 9, 11, 16 and 29. 
Exercise : Find the quadratic residues of 25. 
Solution : 25 =5* . Every quadratic residue of 5 is a quadratic residue of 
25 and vice versa . Thus the least quadratic residues of 25 are those quadratic 


residues of 5 which are less than 5. The least quadratic residuue of 5 are 1 and 
4. Hence quadratic residues of 25 are 1, 4, 6, 9, 11, 14, 16, 19, 21, and 24. 


Exercise : Find all quadratic residue of 50. 
Example : Evaluate 


(ar) 
(a) -(a) lala) 


Solution : 


Again by Reciprocity law . 


(2) -($) (—1) 2/2602) -() a 
61 3 3 : 
(2) = (2) (12/2602) _ ( 5 } 

61 7 7): 
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7) _ (sy 4/2612) _( 2 
Ceaser) 


H (=) =) 
ence 61 7 


42 
2°4 Method Also we can evaluate (=) as follows : 


Since -42 = 19 (mod 61) 


(2)-(2)-g)-comromn 
61 61 19 19 


-(4}- 
19 ; 
Since 61 =4 (mod 19). 


7.5. THE JACOBISYMBOL 


Jacobi extended Legendre’s symbol (a/p) for composite number and formed 
analogous results for the new Jacobi symbol. We define it as follows: 


DEFINITION : Let (P,Q) = 1, Q > 0, Q odd, so that Q = qj, qo....qs 
where the q;’s are not necessarily distinct. The Jacobi symbol (P/Q) is de 
fined by 


iE eats, 
wy (a) 


P 
where (] is Legendre symbol. 
1 


Remark : If Q is an odd prime then Jacobi symbol is same as Legendre 
symbol. 


Clearly (P/Q) =+ 1. But it is not true that 

(P/Q) =1 

=> P is a quadratic residue modulo Q . 

For example (2/9) = 1 but x2=2 (mod 9) has no solution. 
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THEOREM 19: Suppose that Q and Q’ are odd and positive and that 
(PP’, QQ’) = 1, then 


o)(8)-(€0 
o(8) (8-08 


r= reesia= (9) (a) 
(v) P= P(mod Q) > a} la 


PROOF : (i) follows from the definition of (P/Q) and 
(ii) follows from the definition and from the properties of Legendre’s sym- 
bol. 
(iii) follows from (i) and (ii) so also (iv). For (v) we write Q=q) 2 «.. qs- 
Then P’ =P (mod q)) so that (P'/q;) = (P/qj) Hence (v) follows from the 
definition. 
THEOREM 20: If Q is odd and Q > 0, then 


-1 eh a 
|) wa beet e 4) _ ¢_yy@?-8 
(16) (2) (-1) na(3} (-1) c 
PROOF : We have 


@-ila)- bor 
Q) Hayy si 


s 
Ej 
( pe! J . 


If a and b are odd, then 


ab=1 (8544 Bet) CBO =D 20 (mod 2) 
2 2 2 2 
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and hence 


a-1 b-1_ab-1 
pl = ae 
7) a 3 (mod 2). 


Applying this repeatedly we obtain 


5 be s es 
z (2 t)=5 > g-1=(24) (mod 2). 
j=l 2 2 j=l 2 


eal Q-1/2 
—|=(-l 5 
A ie 


Similarly if a and b are odd, then 


ab? -1 Biel, bead _@-) 0-1) 
8 8 8 8 


Thus 


= 0 (mod 8). 


So we have 


aziai Sbt= 1 Wi(atb? 1 
+ = 


) 
A ; (mod 2) 


$ ar1_Q-1 
= 8 


1 Be a (mod 2). 


j 
and hence 


es yt. 


THEOREM 21: If P and Q are odd and positive and if (P,Q) = 1, then 
P\(Q 
=] ) SF] 20-1) 1 2(Q-1/2) 

ae [E)(S)- " 


Tr Tr 
PROOF : Writing P= wt pj andQ= a qj 
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s S012 1 
(2)- sah (| eel raze 
Q) jilay) set i=t( gj 


oye 
| () (2) pel aH {1-1/2} {@j-1/2) 
Q 


w 
me 
= 
> 
ca 
3 
3 
} 
= 
a 
s 
= 
2 
rc 


jel 2 
and 
r x a 1 2 
zr Pi=1 shall; aire = ee mod 2) 
Sn Dr eatin 2 
and 
‘ae (3) (1yt(P-/2} (Q-172) 
Q P 


which proves the theorem. 
For example 


(sis) “(its)- Gs) 


Example 1 : Determine whether 888 is a quadratic residue or non-residue 
of the prime 1999. 


Solution : We have 
tes) = (sis) oss) Gs) 
1999 1999 }\ 1999 } (1999 
-(ioss)~ (as) (is) 
1999 1999 ) (1999 }° 


We can calculate (3/1999) and (37/1999) by applying quadratic reciproc- 
ity law . Also we have by Jacobi symbol 


(a)- -(22)-- -(4)- 
1999 111 111 : 
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Therefore 888 is a quadratic non-residue modulo 1999. 


E le 2 : Eval 3) 
xample 2 : Evaluate 7657 | 


Solution : 595 = 5 x 7 x 17, 7657 = 13 x 19 x 31. 
Hence (7657, 595) = 1. 


(5)-C3)-B)(2) 
{BB on()-0(8 
A) 


7.6. COMPUTING SQUARE ROOTS MOD p. 

Once we know that the congruence 

xe =a (mod p) 

has a solution, how do we find it ? We describe an algorithm that is ex- 
tremely fast in its search for a solution. 

Case(i) If p= 3 (mod 4) ie p = 4n + 3, the solution is simple. 

For in this case x = a! = a(P+D/4 is a solution to x2 =a(mod p)- 

We verify this by 


x2 = aznt+2 = q2ntl asalP-l/2 a=1a(mod p) 


since aP!2 =1 (mod p) for a quadratic residue a. 
Case (ii ) If p=1 (mod 4) we can have p=1.5 (mod 8). If p=5 (mod 8) and 


2 is quadratic nonresidue mod p = 8k+5, we can solve the congruence as fol- 
low: 


2 is a quadratic residue modulo p when p=8k+5. 
By Euler’s criterion 
aP!2 = 1 (mod p) 
> (aP-!?2 _ 1) =0 (mod p) 
If a?-/4 = 1 (mod p) 
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then x sapts/8 (mod p) is a solution otherwise 
x = 2a (4a)P-9/8 (mod p)_ is a solution. 


If p= 4n + 3. We write p-1 = 2s with s odd. Let x = att] = g +)? js the 
solution to x2 = a (mod p) because (aS*)/2)2 = aSa and aS = 1 (mod p). with s 
odd. 


We can not repeat this for p = 3 (mod 4) as p-1/2 is even ie if we write p- 
1 =2s, then s+1/2 is not an integer. We write p-1 = 2's, with s odd. Let us try 
x = a+)2 and see how much it differs from a solution 

x? =a St! = aS a (mod p). 

Now both a and x? are quadratic residues. So aS is also quadratic residue. 
Suppose we know an element z such that z2 = a (mod p) , then we can write 

x2 =z? a(mod p) multiplying by the inverse of Z, 

we get (x z')? =a(mod p) 

that is, we can solve =a (mod p ) if we can solve z= aS (mod p) 

To solve z? = aS (mod p) 
The ord, a\| 2"! and if zis a solution then ord,(z) | 2°. 


Then there are 2° elements of order dividing 2", and z must be one of 
these. Since 2" can be much smaller than p, to find the solution is simpler. We 
illustrate this by example. 

Example: Solve x? = 2 (mod 41). 

We write p-1 = 41-1 =40=8.5= 35, sor=3 ands =5 (odd). To search 
for elements of order 2° = 8, the most natural idea is to look for a primitive root 
g (which has order 40); then g° and all its powers will have orders dividing 8. 
Now 7 is a primitive root modulo 41, and 7 =38 (mod 41) has order 8. 


Let S = { 38, 382, 38%, 384, 385, 38°, 387, 38°} 


All the elements of S have order dividing 8, and S includes all elements of 
orders that divide 8, as there are eight elements of order dividing 8. We reduce 
S modulo 41 to get 


S = (38, 9, 14, 40, 3, 32, 27, 11}. 
Now 25 = 32 =38° (mod 41) is in this set 
and our solution is 
X= gS+1/2 38°6/2 
=23 , 383 = 23 385 (since 38°9 = 38°(mod 41)) 
=8.3 =24(mod 41). 
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So x = 24 (mod 41) satisfies the congruence 
x? =2(mod 41). 


ANOTHER ALGORITHM FOR FINDING SQUARE ROOTS 
MODULO p. 


Let p be an odd prime, and suppose that we know a quadratic non 
residue n. 


Let a be an integer such that (a/p) = 1. We want to find an integer x such 
that 


x2 =a (mod p). 

First write p-1 = 2" s where s is odd . Then compute n* modulo p, and call 
that b. Next compute as+D2 mod p, and call that o, 

Claim : We claim that o is close to being a square root of a Take the ratio 
«/a, we claim that we get 2"! " root of unity modulo p. 

(a! opt! = aS! = aD? = (a/p) = 1. 

We must then modify a by a suitable 2" th root of unity to get an x such 
that x2/a is 1. To do this we claim that b is a primitive root of 2 th root of unity, 
which means that all the 2‘ th root of unity are powers of b . To see this first we 
note that b is a 2‘ th root of 1, because 


poten?’ = nP-! = 1. If b were not primitive, there would be a lower 


power (a divisor of 2") of b that gives 1. But then b would be an even power of 
a primitive 2'-th root of unity, so would be a square. This is impossible because 
(b/p) = (n/p)* = -1 (since s is odd and n is a non residue). 


These b is a primitive 2'-th root of unity. Next to find b , 0 <j <2", such 
that 


x = blo. gives the desired square root of a. Write j in binary form as j = jo 
+ 2j,, +... + 2°? j,.2 and show how one successively determines whether jo, 
ji,... is 0 or 1. To find binary digits of j we have to proceed as follows. 


1. Raise (a2/a) to the 22-th power. The square of this is 1. 


Hence we get either + 1. If we get 1 thenj, = 0, if we get -1, take j, = 1. 
We note that j, has been chosen so that 


( (b!°q)?/a) is a 2"? th root of unity . 


2. Suppose we have found jo, jj, .-- jk-t 
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[vei ry 


2 
is 2"! th root of unity and we 
a Y 


such that 


want to find j, . Raise this number to half the power that gives 1, and choose jx 
according to whether you get +1 or—1 


He 
gk; 2" 
i thanct 
( pi, Med “| 1 


if a 


0 


then take j, = | , respectively. 


1 


2 
[ b desc 


a 


ie: isa 2" th root of unity. 


when we get k =r-2 and find j,2, we then have 


=1, 
a 


Example : Find square root of a = 186 mod p; p = 401 i.e. to solve x2= 
186 (mod 401) using the above algorithm. 


Solution : The first non residue is n = 3. we have p-1 = 400 = 24. 25, and 
so 


b = 3% = 268 and 
a =a! = (186)!3 = 103 (mod 401). 


Compute a! = (168y! = 235 (mod 401), «7/a = 98, which must be an 8'" 
root of unity. Compute 984 . Since 984 = -1 (mod 401) and so jo=l. 


Next we compute (ba Pla =-1. 


Since the 2"! power of this is 1, we have jj = 0 and hence j» =1. 
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Thus j = 5 and the desired square root is b> a = 304. 


7.17. APPLICATION TO CRYPTOGRAPHY 


We have studied public key cryptography. For identification a signature 
attached to a message can be used to verify the sender’s identity. In many 
applications, it is necessary to verify the identity of the sender before a message 
is sent . For example we use a Personal Identification Number or PIN to conduct 
many transactions . Telephone calling cards, and credit cards use a PIN to 
validate transactions. 


Suppose Amit is using a PIN as a secret key to access some services. 
Some one looking over his shoulder or eavesdropping electronically can receive 
his PIN and impersonate Amit . Identification schemes are designed to protect 
against security problems that arise when a secret key is compromised. Instead 
of revealing the secret key to verify Amit’s identify, these scheme provide a 
mechanism for Amit to prove that he knows the secret key . A proof of identify 
is based on some computation involving this key and the intermediate results 
of computation are different for each identification session . 


Now one of the identification scheme is based on the difficulty of factor- 
ing integers. Letn = pq. where p and q are primes solving quadratic congruence 
modulo n is equivalent to computing the prime factorization of n. Suppose a is 
a quadratic residue modulo n. If we know the prime factorization of n, then we 
can solve the congruence x? =a (mod n) by solving x? =a (mod p) and xe a 
(mod q). Conversely we can compute the four roots of =a (mod n) then we 
can factor n. If the roots are + X, and + y, then n= Ven (mod n) but xy =+ Yo 


(mod n), sO (Xp — Yo, N) is a proper factor of n. 

In this identification scheme due to Feigh—Fiat-Shamir, the number n = 
pq can be shared among a group of users, without their knowing p and q. A 
trusted central authority can assign n and public and private keys based on n. 
We require ( v,n ) 1. Amit’s private key is number s, 0 <s <n, such that 


sy! (mod n). 


The protocol for Amit to prove his identity to Bobby consists of the 
following steps. Bobby knows the number n and Amit’s public key v. 


1. Amit selects a random number r, o < r < n and send x = 7 mod n to 
Bobby 


2. Bobby selects a random bit, b = 0 or 1 and sends b to Amit. 


3. Ifb=0, then Amit returns r to Bobby, otherwise, Amit returns y = (rs) 
mod n. 
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4. Ifb=0, then Bobby verifies that x =r? mod nand if b=1 , then Bobby 
verifies that y2 =xvu! (mod n). 


Verification : Amit’s identity is verified because he is proving his knowl- 
edge of the private key s, without revealing it . This protocol is repeated many 
time to validate Amit’s identity. This scheme is secure, because if a third per- 
son Anu is trying to impersonate Amit without knowing s satisfying s* ="! 
(mod n), then Anu cannot satisfy both the condition in step 4. If he sends 
x such that x = r?(mod n), then he can not find y? =xvu! (mod n) without 
knowing prime factors of n. If he chooses x and y such that y? = x v™! (mod n), 
then he will be able to satisfy the quarry when b = 1 but not when b = 0. If b is 
randomly chosen bit, the probability that Anu can guess it correctly in advance 
is %. If the protocol is repeated k times, the probability that Anu has guessed 
each bit correctly is 2k. So if k is chosen to be large value, say k > 50, then the 
chance of some one impersonality Amit are slim. 


THEOREM 22 : Suppose x is a quadratic residue modulo n = Pq, with 
p.and q primes satisfying p = q =3 (mod 4), Then there is a unique y such that 
y? =x (mod n) and y isa quadratic residue modulo n. 


PROOF : Since n is a product of two primes, there are four solutions to 
the congruence y? =x (mod n). If yg is a solution, then the four solutions are 


Y = Yo (mod p) Y = Yo (mod p) 

Y = Yo (mod q) Y =-Yo (mod q) 
Y = -Yo (mod p) Y =-Yo (mod p) 
Y = Yo (mod q) = -Yo (mod q). 


The four possible solutions give rise to four possible combinations of the 
Legendre symbol (y/p) and (y/q). The four pairs are: 


{(Yo/P), (Yo/G) + (Yo/P), (-¥o/a)} . 
(-Yo/P), (Yo/q), (-Yo/P), (-Yo/a) 


Since p = q =3 (mod 4), the Legendre symbols (-1/p) and (-1/q) are both 
—1,and each of the four possible combinations of signs. {1, 1 }, {1-1}, {-1,1 } 
and {-1,-1} must occur once, irrespective of the values of (yo/p) and (y,/q), 
Hence, there is only one y such that (y/p) = 1 and (y/q) = 1, that is there is only 
one solutions to y? =x (mod n) such that y is a quadratic residue modulo n, 


Example : Consider n = pq with p = 331 and q = 431. We select x = 
115.35 as a quadratic residue modulo n we can solve y? = x (mod n), to obtain 
the solutions y =+ 127060, + 58962 (mod n). Of these four, only one, 127060 
is a quadratic residue modulo n. 
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As an application to cryptography to construct a one-time pads ina public 
key system. A onetime pad is a string So, S, Sz ... 8, that is added to the plaintext 
Po» --» Px to produce a ciphertext co, c1,.. cx. This is represented by c; = pj + sj 
(mod 2). Suppose Amit set a public key n = pq, where p and q satisfy p=q =3 
(mod 4). If Bobby wishes to send a coded message to Amit, then he chooses a 
number x, and compute the sequence Xo, X; ... Xk Xk41- Where xj, 1) = x? (mod 
n) for i=0, 1, 2, ..k then Bobby compute the bits s; = x; (mod 2). The random 
bit stream sj, Sz.. Sx is used as one time pad to the plaintext pj, p2.. Px. 

Bobby sends the ciphertext co, c; ..c, with cj = pj + sj (mod 2) and the 
integer x,,; Amit uses x,_; to recover the number xj, X,.1, ...X, and from this, 
the one time pad . It is easy to recover the plaintext from the knowledge of the 
ciphertext and the one time pad. 

The scheme works because there is only one square root of each term that 
isa oe residue, The scheme is more secure as it depends on computing y 
satisfying y? =x (mod n) is equivalent to factoring n 


EXERCISES 


p-l 
1. Prove that z (j/p) = 0, p an odd prime. 
jz 


eas £28 51 
2. Evaluate o( 25) o( =| in (3) 
05 2ag 
v2) co) oo) 


3. Prove that if p and q are distinct prime of the form 4k + 3, and if x? 
= p (mod q) has no solution, then x= q (mod p) has two solutions. 

4. Show that 665 is a quadratic residue of 1443. 

5. Find the solutions of x78 = 1 (mod 13) 

6. Let p be an odd prime prove each of the following statements: 


p-l D 4 
@ lr [£}-oirp=1 cmos 


p-l = 
Gi, Fe ped ined 4), 
rl 4 
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10. 


p-l p-l 
(iii) = ? (/p)=p = (tp) if p=3 (mod 4). 
ES ied 
pl p-l 
(iv) = P (1/p) =3/2 p z r (t/p) if p= 1 (mod 4). 


p-l p-l 1 
(») © 4 (lp) =2p = P(lp)-p? 'E 1 (/p) 
r=1 r=1 rl 


if p=3 (mod 4). 
Prove that if p =3 (mod 4) 


p-l q 
{(2/p) -2} ea t (t/p) =p z (r/p) 


where q = p-1/2. 


Prove that 3 is a quadratic non residue of all primes of the form 
2°" + 1, as well as primes of the form 2?-1, where pis a prime. 


Determine whether the following quadratic congruences are solvable. 
(a) x? = 219 (mod 419), 

(b) 3 x°+ 6x + 5 =0 (mod 89). 

(c) 2x? + 5x -9 =0 (mod 101). 

Evaluate the Jacobi symbols 


21 215 631 
(a) (#) (b) (33) (c) ($3) 


Use Gauss lemma to show that 17 is a quadratic residue modulo 19. 
Does the congruence x? = 631 (mod 1093) has any solution ? 
Show that x? = 15 (mod 89) has no solution. 


Write a computer program to evaluate Legendre symbol (a/p) using 
Euler’s criterion. 


Show that the smallest positive quadratic non-residue modulo pis 
always a prime. 


oe 


|CHAPTER 


PRIMALITY TESTING AND 
FACTORING 


8.1. PSEUDOPRIMES AND CARMICHAEL NUMBERS 


As an application of number theory to cryptography we want to know if 
large number n is prime. For example , we have shown in chapter v that in the 
RSA public key cryptosystem we need to find a large “random” prime. For this 
we use primality testing which means to determine whether an integer of a 
certain very special type is a prime. 


PRIMALITY TEST : A primality test is a criterion for a number n not to 
be prime. If n ‘passes’ a primality test, then it may be prime. If it passes a 
whole lot of primality tests, then it is very likely to be prime. If n fails any 
single primality test then n is surely composite. But if n is composite and large 
enough then it is difficult to factorize it. In this chapter we will study some 
primality test and factorization of big primes. 


The simplest primality test is “trial division”. Suppose n is a large odd 
integer. To test whether or not n is prime. Take an odd integer m and see whether 
or not it divides n. If m# 1, and m|n, then n is composite otherwise n passes 
the primality test “trial division by m”. If n passes all the trial division test then 
nis prime. We know that n is prime when m reaches Yn. Of course this trial 
division method is very time consuming. We will search for other test. One is 
the Fermat’s little theorem Fermat’s theorem tells that if gcd (b,n) = 1 for any 
b and n is prime then 


qd) b"-! = 1 (mod n). 


If n is not prime it is still probable that (1) holds. We define pseudoprime 
as follow: 


DEFINITION : If n is an odd composite number and b is an integer such 
that é 
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ged (bn) = 1 and b"-! = I (mod n) then nis called as the pseudoprime 
to the base b. 


We say that ‘pseudoprime’ is a number n that ‘pretends’ to be prime by 
passing the test (1). 


Example 1: n= 91 is a pseudoprime to the base b =3, because 
gcd. (3,91)=1 and 

3° = 1 (mod 91). 
But 91 is not a pseudoprime to the base 2, because 2° = 64 (mod 91). 
But 91 is composite and 

299 =1 (mod 91). 
Therefore 91 is not a pseudoprime to the base 2. 


Example 2 : 15 is a pseudoprime to the base 4 and 11 but not to the base 
2 and 3. 


We have to show that 
4!4 = 1 (mod 15) 


Since 4? = 1 (mod 15) 
> 4!4 = | (mod 15) 
11'4 = 1 (mod 15) since 117 = 1 (mod 5), 
112 = 1 (mod 3) 
Hence 11? = 1 (mod 15) 
= (11)!4 = 1 (mod 15). 
But 2!'4 = 1 (mod 15) and 3!4 = 1 (mod 15). 


THEOREM 1: Let n be an odd composite integer. Then 
(a) _ nis pseudoprime to the base b, where ged (b.n) = 1, if and only if 
the order of b divides n-1. 


(b) If n is pseudoprime to the bases b; and b2 where ged (bj,n) = 1 
and ged (b ,n) = 1, then n is a pseudoprime to the base b; bz and 
also to the base byby"!. 

(c) _ Ifn fails the test (1) for a single base b, then n fails (1) for atleast 
half of the possible bases. 


PROOF : To prove (a): From the hypothesis we have b,""! = 1 (mod n) 
and 


bo"! = 1 (mod n). 
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These two imply (b, bz )"-! = 1 (mod n) . This proves (a). 


Similarly the proof of (b) follows . To prove (c), let {b), by, .. bg} be the 
set of all bases for which n is pseudoprime, i.e. the set of all integers 0 <b; <n 
for which the congruence (1) holds. Let b be a fixed base for which n is not a 
pseudoprime. If n were pseudoprime for any of the bases b b;, then by (b) it 
would be a pseudoprime for the base b = (b b;) bj! (mod n) which is not the 
case. Thus, for the s distinct residues { bb;, bbo, ... bb,}, the integer n fails the 
test (1). Hence, there are at least as many bases for which n fails to be a 
pseudoprime as there are base for which (1) holds . Hence proved. 


Now the question is: For acomposite n (1) holds for every b ? 


The answer is yes, and such a number is called a Carmichael number. 
Such numbers first studied by R. D. Carmichael in 1912. We define Carmichael 
number as follows : 


DEFINITION 2: A Carmichael number is a composite integer n such 
that 
(2) b-! = 1 (mod n) for every b. 
Example : 561 is the smallest Carmichael number. 
561 is composite as 561 = 3. 11. 17. To show that a> = | (mod 561). 
By Fermat’s theorem 


a? = | (mod 3) 

a a°60 = (q2)280 = | (mod 3) 
al =| (mod 11) 

sh a°60 = | (q!)56 = | (mod 11). 
a!6= 1 (mod 17) 

ak 960 = (4!6)35 = | (mod 17). 


Since 3, 11, 17 are mutually relatively prime we obtain 
a? = 1 (mod 561) forall a. 


Example 2: 341 is not a Carmichael number. 


341 = 11x31 

a! = 1 (mod 11) a®9 = | (mod 31) 
(a!)34 = 1 (moa 11) a340 = | (mod 31) 

a349 = | (mod 11) So a340 = 1 (mod 341) 
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PROPERTIES OF CARMICHAEL NUMBERS 


THEOREM 2: A composite number n is a Carmichael number if and 
only if for every p|n we have that p—1| n—1. 


PROOF : First suppose that p-1| n—1 for every p dividing n. Let 3 be any 
base, where ged (b,n) = 1. Then for every p dividing n we have b"-! isa power 
of bP-!, and so is = 1 (mod p). These b"“! -1 is divisible by all prime factors p 
of n, and hence by their product which is n . Hence (2) holds. Conversely, 
suppose that there is a p such that p-1_| n-I. Let g be an integer which is a 
generator. Find an integer b which satisfies b = g (mod p) andb = 1 (mod n/p). 
Then ged (b, n) = 1, and b*!=g""! (mod p). But g"-!_ = 1 (mod p) because (n 
— 1) is not divisible by the order p—1 of g. Hence b"-! = 1 (mod p) and so(2) can 
not hold This completes the proof of the theorem. 

THEOREM 3: Let n be a composite integer . If n is divisible by a 
perfect square > | then n is not a Carmichael number. 


PROOF : Suppose that pln. Let g be a generator modulo p, i.e. an 
integer such that g?(?-)) is the lowest power of g which is congruent to | mod 
p’. Let n’ be the product of all primes other than p which divide n. By the 
Chinese Remainder theorem, there is an integer b satisfying the congruence. 

b = g (mod p?) and b= 1 mod n’ 

Then b is, like g, a generator modulo p? , and it satisfies ged (b, n) = 1, 
since it is not divisible by p or by any prime which divides n’ n is not a 
pseudoprime to the base b. If (2) holds, then since pin, we have b-! = 1 (mod 
p’ ). But in that case p(p-1)|n—-1, since p(p-1) is the order of b mod p?. 
however n-1 =~1 mod p since pln and this gives that n—1 is not divisible by p 
(p-1). This contradiction proves that there is a base b for which n fails to be a 
pseudoprime. 

THEOREM 4 : A Carmichael number is the product of at least three 
distinct primes. 

PROOF : Suppose n= p q the product of two distinct primes. Suppose 
that p<q. 

Then , ifn were a Carmichael number, we would have n—] = 0 (mod q-1). 

Butn—-1 = p(q-1 + 1)—1 = p-—1 (mod 2-1)and this is not = 0 (mod q-1), 

since 0 < p~1 <q-1. This completes the proof. 

Example 1: 561 is a Carmichael numbers since n = 561 = 3. 11. 17 


and 560 is divisible by 3-1, 11-1 and 17-1. 
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Example 2 : 1105 = 5.13.17 is a Carmichael number since 1104 is 
divisible by 4, 12 and 16. 


8.2. STRONG PSEUDOPRIMES AND PROBABILISTIC PRIMA- 
LITY TESTING. 
We define strong pseudoprimes as follow : 


DEFINITION 1 : Let n be an odd composite number, and write n—1 = 2*t 
with t odd. Let b be any integer. If n and b satisfy the condition either b'= 1 


(mod n) or there exist r, 0 <r <-s, such that vb?! =-1 (mod n), then n is called 
a strong pseudoprime to the base b. 


DEFINITION 2: Let n be an odd integer, and let (b/n) denote the Jacobi 
symbol. If n is a prime number, then 


(3) b®-D? = (b/n) mod n. 


DEFINITION 3 : If n is an odd composite number and b is an integer 
such that ged(n, b) = 1 and (3) holds, then n is called a Euler pseudoprime to 
the base b. 


THEOREM 5: if n is a Euler pseudoprime to the base b, then it is 
pseudoprime to the base b. But the converse is not true. 


PROOF : If n is a Euler pseudoprime to the base b, by definition 
b@-D? = (b/n) (mod n), g. c.d(n,b)=1. 
» Squaring both sides of the congruence we have 
b"™! = 1 (mod n); ged (n, b) = 1. 
Which implies n is a pseudoprime to the base b. 
The converse is not true can be shown by the following example . 


Example : 91 is a pseudoprime to the base 3. However 3?!-!? = 27 (mod 
91) so (3) is not true for n = 91 and b = 3. Hence 91 is not Euler pseudoprime 
to the 3. But 91 is a pseudoprime to the base 10, since 109!” = 10% = 10° = 


-1 (mod 91) and since 
91 91 91) 


2 (91)2-1/8 
= ]=(41 =-1. 
(2) ay 


Primality Testing and Factoring 183 


gHalermn 2-6) 

91 3 5 5 
wan 

Hence Ot ann 


So 104= (2) (mod 91) 
91 : 


THEOREM 6: Ifn=3 mod 4, then n is strong pseudoprime to the base 
b if and only if it is an Euler pseudoprime to the base b. 

PROOF : Since n =3(mod 4)ie. n=4k +3, 

here n-l = 4k +2 = 2(2k+1) 

Hence s =landt=n-1/2. 

We see that n is a strong pseudoprime to the base b if and only if 

p("-D2 = + 1 (mod n). If n is a Euler pseudoprime then the congruence 
holds by definition. Conversely suppose that p"-!2 = + 1. To show that + 1 on 
the right is the Jacobi symbol (b/n). 

But for n =3(mod4)i.n=4k+3, +1=@ 1/n) , and so 


inh arose 


=b™! (mod n). 

Hence pr-!/2 = (b/n) (mod n). 

Hence n is Euler pseudoprime. This completes the proof of the theorem. 

THEOREM 7: If nis a strong pseudoprime to the base b, then it is an 
Buler pseudoprime to the base b. 

The proof is difficult and lengthy. We are leaving it. 

THEOREMS: If nis an odd pseudoprime to the base 2, then the Mesenne 
number 2"-1 is a strong pseudoprime to the base 2. 

PROOF : First we will prove that 2" -1 a pseudoprime to the base 2. 

Let n! =2"-1, 

To show that 


21 = 1 (mod n!) or 2" = 2 (mod n'). 
nis a2 pseudoprime implies 
2%! = 1 (mod n) or 2" = 2 (mod n) 
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or nf 202 =a 


> n!-1 =nk for some k, then 2"! 1 = 2nk_y 
= (28-1) (291) 40 24-1), 
=n! andy +... 4294-1) 
=> n! | 2M 1} or 2mi-lay (mod n!) 
or j 2"! =2 (mod n!) the required result. 
Next to show that 2"-1 is a strong pseudoprime to the base 2. 
We writen! -1 = 2"-2=2(2"'_])=2nk, so the odd part of n! —1 is nk. 
Clearly 2"-1 = 0 (mod 2"-1) or 2" = 1 (mod n!), 
This implies that 2"* = 1 (mod n!) since nk is odd part of n'—1, this shows 
that 
n! = 2"_]is a strong pseudoprime to the base 2 This completes the proof. 


ALGORITHM 1 : (Simple primality Test) 
Given n <25.10°, this agorithm determines if n is prime. 
1. Ifn fails the strong pseudoprime test to base 2, then n is composite. 
2. Ifn fails strong pseudoprime test to base 3, then n is composite 
3. Ifn fails the strong pseudoprime test to base 5, then n is composite. 
4. Ifn fails the strong pseudoprime test to the base 7 then n is composite. 
5. Ifn fails strong pseudoprime test to the base 11 then n is composite. 
Example : Consider n = 117371. We factorize n-1 = 2.58685. 


Compute 

2' =-1 (mod n) where t = 58685, 
and 22t = 1 (mod n) 
and 3' = 1 (mod n) where t = 58685. 


This implies nis strong pseudoprime 


Note : It is to note that the strong pseudoprimes are much more useful 
then pseudoprimes to detect compositeness. 


If n fails a strong pseudoprime test, then it is composite. Suppose we 
check for 50 random bases, then the probability that a composite number 
successfully passes 50 random pseudoprime test is less than ¥2 50. In this case 
the number is very likely to be prime. We call a number that passes this test a 
probable prime we must note that this does not prove that the number is 
prime. 
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We are giving now the following probabilistic algorithm for compositeness, 
or detecting probable primes. 
ALGORITHM 2: (Rabin —Miller Probabilistic Primality Test ) 


We use the strong pseudoprime test to several random bases to check if n 
is a probable prime. The test should only be applied after checking if the number 
has any small factors. 


1. [initialize] Let t= n-1,s =0,k=50 
2. [Compute n-1 = 2%.t]. If t=0 (mod 2), t = t/2,s =s + 1, and repeat 
step 2. Otherwise go to step 3. 


3. Choose a random integer b <n and set b= b' mod n and c = 0. if b= 
1. go to step 5, otherwise go to step 4. 


4. Ifc>s-2 or b = 1, then n is composite. If b = —-1 go to step 5 
otherwise 


b=b? mod n, c =c +1, repeat step 4. 


5. Letk =k-l. If k > 0, go to step 3. Otherwise, report that n is a 
probable prime. 


Probabilistic primality tests are quite sufficient for large primes. We give 
now a short and easy primality test to verify whether n is prime or composite. 


We have defined earlier the order and primitive root of an integer modulon. 
8.3. PRIMALITY TESTING (APPLICATION OF PRIMITIVE 
ROOTS AND INDICES TO CRYPTOGRAPAY) 


Now we will give Lucas-Lehmer primality test and the ElGamal 
Cryptosystem. 


THEOREM 9: (Lucas Lehmer ) Suppose there exists an integer b such 
that 


b"-! = 1 (mod n). But for each prime q dividing n-1, b® 9 = 1 (mod n), 
then n is prime. 

PROOF : To prove that order , (b) = n-1. The congruence b*! = 1 
(mod n) 

= order ,(b) |n-1. 

Let n—1 = ord, b.k for some k. To:show that k = 1, so suppose that k > 1 
and a prime q divide k, then q | n-1, and we can write 

pa-Dia = pordnb-ky/q =1(modn). 


This contradicts the hypothesis of the theorem, so k = | and ord,(b) = n-1. 
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As ord, (b) | p(n), we must have @ (n) = n—1, but @ (n) < n-1, therefore 
(n) = n-1 and n is prime. 
Example 1 : Consider n = 29. n-1 = 28 = 22.7 
Take b=2. Now 
2n-! = 228 = 1 (mod 29) 
228/2 — 214 = 28 (mod 29) 
ie. 2!4 # 1 (mod 29) 
228/71 — 24 = 16 (mod 29).#1 (mod 29) 
So by theorem 9, 29 is prime. 


Example 2 : Letn = 911. 
n-1=910=2.5.7.13 


Now 
7“! =1 (mod n) 7-2 = _] (mod n) 
3"-! = 1 (mod n) 30-DIS = 482 (mod n) 
2"-! = 1 (mod n) 2(0-)/T = 568 (mod n) 
2-l =1(modn) 20-013. = 4. (modin). 


The ElGamal system (Application of Discrete logarithm to 
Cryptography). 

The ElGamal system, a publickey cryptosystem, is based on the presumed 
difficulty of discrete logarithm problem. We know that if r* = y (mod p) then x 
is the discrete logarithm of y mod p. There is no method to compute x with the 
knowledge of r, y and p, where p is a large prime. 

The ElGamal system can be used for both encryption and signatures. We 
will describe the method as follows: 

Suppose Ajit wishes to receive encrypted message. He chooses a prime p 
and a primitive root r modulo p. He selects a private key a, 0 <a < p-1, and 
computes b =r" mod p, Ajit’s public key is k = (1, b, p). To encrypt a message 
m, 0<m<p, one has to proceed as follows : 

1. Choose arandom number s, | <s <p-1 
2. compute y; =r‘ mod p and yz = mb* mod p. 
3. The ciphertext is Ex (m) = (yj,y2). 

The security lies in the choice of random number r. Ajit can recover m 

using the decryption function 


Dx (y1, Y2) = y2 (v1) mod p. 
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This is valid because 
Dx (y1 Y2) = y2 (yi) mod p 
= y2 (r“*) mod p 
=y2 (r*)* mod p 
=m bs b’$ (mod p) 
=m (mod p). 
Example : Let p = 37,r=2 and a=31. 


Then b = 22! (mod 37) = 22. Suppose plaintext is m = 19. Let A chooses 
arandom number say s = 7; then 


y1 = 27 (mod 37) 


=17, 

y2 = 19 . 227 (mod 37) 
= 19.2 (mod 37) 
=l1. 


Then A sends Ex (m) = (17, 1) to B. To decipher this B computes Dx 
(7, 1) 
= 17-3! (mod 37) = 19. 
The security of the system lies in the computation of the private key a 
from the public key parameters using discrete logarithm problem, which is 


difficult. Hence the security of the ElGamal system is equivalent to the discrete 
log problem. 


Another quality of the system which is important for its security is the 
choice of random number s. The same value of s should not be used with 
different plaintext. If the same s is used for different plaintext, then it will be 
possible to recover all plaintext from the knowledge of one. 


In the subsequent section we will discuss some factorization method. 


8.4. POLLARD’S (p-1) METHOD 


We discuss two factorization method due to J. N. Pollard. Pollard’s (p—1) 
methods is the following : 


Suppose n is the number to be factored, and say pln, p is a prime. 
Now b?-! = 1 (mod p) for any b such that g cd d (b, p) = 1. 
Suppose p-1 divides a number M; then a™ = 1 (mod p) ie p| aM -1. 
Since pln and pla 1, p will divide their ged (n, aM1), 
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We compute aM_] (mod n) and (aM_1 mod n, n). If this gcd is not equal to 
n, then we would have found a non trivial factor of n. This factor is p. Let us 
illustrate by example. 


Example 1: Consider n = 1073 = 29.37. If p = 29, p—1 = 28. Let b =2 
28 = 900 (mod 1073) and (900 -1, 1073) = 29. 
Similarly 
236 =777 (mod 1073) 
and (777-1, 1073) = 37, the second factor. 


8.5. POLLARD’S RHO METHOD 
The first step in this method is to choose an easily evaluated map from Z/ 
nZ to itself, a simple polynomial with integer coefficients such as f(x) = x2 +1. 
Next choose a particular value x = Xo (Xp = 1 or 2 or randomly generated 
integer) and compute the successive iterates of f : x, = f(x), x2 =f (f(Xo)), X3 = 
F(F(F(%0))). 
We define Xjat = f(x) j=0, 1,2... 
Compare between different x;’s, find two which are in different residue 
classes modulo n but in the same residue classes modulo some divisor of n. 
Finding such x;, x,, we have ged (x; — xx, m) is equal to a proper divisor of 
n, and complete the factorization. 
Example 1 : Factor 91 choosing f(x) = x? +1, xp = I. 
We have x; = f(xg) = 2 
Ry = 9, %9 20 
We find ged (x3 — x2, n) = ged (21, 91) =7, so 7 is a factor. 
Exercise : Factor 4087 using f(x) = x?+x+41 and Xoi= 2: 
8.6. _FERMAT’S FACTORIZATION METHOD 
Fermat factorization is based on the fact that n is equal to difference of 
two squares, one of which is very small. 


THEOREM 10: Let n be a positive odd integer. There is 1 to 1 
correspondence between factorization of n in the form n = ab, where a> b>0, 
and representation of n in the form t? — s?, where s and t are non negative 
integers. The correspondence is given by the equation . 


t =atb/2,s=a-b/2,a=t+sb=t-—s. 
PROOF : We can write 

n =ab=((a + b)/2)* —((a—b)/2)’, 
So we obtain the representation as a different of two square. 
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Conversely, given n = t? -s*, we can write n= t? — s? =(t +s) (t—s). 
The equation gives the 1 to 1 correspondence between the two ways of 
writing n. 
If n = ab with a and b close together, then s = a —b/2 is small and so t is 


slightly larger than Vn. So we find a and b by trying all values for t starting 
with [Vn] + 1 until we find t? —n = s? is a perfect square. 


Example : Factor 200819 


Solution : We have 200819 + 1 = 449. Now 449? - 200819 = 782 which 
is not a perfect square. Next we try 


t = 450 . 450? — 200819 = 1681 = 417. 


Then 200819 = 450? — 412 = (450 + 41) (450 — 41) = 
491, 409. 


For finding a and b we try to find 
t =[vn] 41, [vn] +2... 


Also we choose a small k, successively set t= [Vkn] +1, [Vkn] AP Divine 
until we obtain at for which t?— kn = s? is a perfect square. 


Exercise : Factor 141467. 
SOME COMPUTER PROGRAM FOR FINDING PRIME FACTORS 
OF ANY INTEGER. 


The following BASIC program will find the prime factors of any integer. 
The integer is input to the program as data. the program terminates execution 
whenever a zero is typed as input. 


100 REM PRIME FACTORS OF ANY INTEGER 
110 PRINT “PRIME FACTORS OF ANY INTEGER” 
120 PRINT 

130 PRINT 

140 PRINT 

150 PRINT “NUMBER TO BE FACTORED IS”; 
160 INPUT A 

170 IF ABS (A) <= 1 THEN 340 

180 LET N = INT (ABS(A)) 

190 REM FIND AND PRINT PRIMES 

200 LET B =0 


210 FOR | = 2 TO N/2 


190 


220 
230 
240 
250 
260 
270 
280 
290 
300 
310 
320 
330 
340 
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IF N/1 > INT (N/1) THEN 300 
LETB=B+1 
IF B>1THEN 260 
PRINT “PRIME FACTORS OF “; N; “ARE” 
PRINT 1 ; 
LET N=N/I 
IF N =1 THEN 120 
LET I=I-1 
NEXT I 
IF N <> INT (A) THEN 120 
PRINT N; “IS A PRIME NUMBER” 
GOTO 130 
END 


RUN 


PRIME FACTORS OF ANY INTEGER 
NUMBER TO BE FACTORED IS ? 56 
PRIME FACTORS 56 ARE 


2 


2 2 7 


NUMBER TO BE FACTORED IS ? 346 
PRIME FACTORS OF 346 ARE 


2 


73 


NUMBER TO BE FACORED IS ? 397 
397 IS A PRIME NUMBER 


NUMBER TO BE FACTORED IS ? 560 
PRIME FACTORS OF 560 ARE 
2 2 2 2 5 7 


The following BASIC program uses Fermat’s method to compute the largest 
factor of a given integer. 


100 
110 
120 
130 
140 


REM LARGEST FACTOR OF ANY NUMBER 
PRINT “WHAT IS THE NUMBER”, 

INPUT N 

IF N = 0 THEN 280 

LET W = INT (SQR (N)) 
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150 LET X =2 * W+1 
160 LETY=1 
170 LET R= W* W-N 
180 IF R = 0 THEN 250 
190 IF R> 0 THEN 220 
200 LETR=R+X 
210 LET X = X42 
220 LET R=R-Y 
230 LET Y =Y+2 
240 GOTO 180 
250 LET F = (X-Y)/2 
260 PRINT “LARGEST FACTOR OF “; N;”IS”; F 
270 GOTO 110 
280 END 

RUN 
WHAT IS THE NUMBER? 311 
LARGEST FACTOR OF 311 IS 1 
WHAT IS THE NUMBER ? 45 
LARGEST FACTOR OF 45 IS 5 
WAT IS THE NUMBER ? 0 


The BASIC program shown below computes the largest factor of the 
number listed in DATA statement. 


100 REM LARGEST FACTOR PROGRAM 

110 READ N 

120 FOR D =2 TO SQR (N) 

130 IF N/D = INT (N/D) THEN 170 

140 NEXT D 

150 PRINT N, “IS A PRIME NUMBER” 

160 GOTO 110 

170 PRINT N/D, “IS THE LARGEST FACTOR OF “;N 


180 GOTO 110 
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190 DATA 3394, 5799, 2827, 1907, 9115 
200 DATA 2807, 1495, 373, 19, 206 
210 END 
RUN 
1697 IS THE LARGEST FACTOR OF 3394 
1933 IS THE LARGEST FACTOR OF 5799 
257 IS.THE LARGEST FACTOR OF 2827 
1907 IS A PRIME NUMBER 
1823 IS THE LARGEST FACTOR OF 9115 
401 IS THE LARGEST FACTOR OF 2807 
299 IS THE LARGEST FACTOR OF 1495 
373 IS A PRIME NUMBER 
19 IS A PRIME NUMBER 
103 IS THE LARGEST FACTOR OF 206 
OUT OF DATA IN LINE 110 
To find all pairs of factors of an integer, use the following BASIC program. 
100 REM PAIRS OF FACTORS OF AN INTEGER 
110 PRINT “ PAIRS OF FACTORS” 
120 PRINT 
130 PRINT 
140 PRINT “TYPE THE INTEGER”; 
150 INPUT X 
160 PRINT 
170 PRINT “THE PAIRS OF FACTORS OF “;X;”ARE:” 
180 FOR A = | TO SQR (ABS (X)) 
190 IF INT (X/A) <> X/A THEN 210 
200 PRINT A, X/A 
210 NEXT A 
220 PRINT 
230 PRINT 
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240 PRINT “TYPE 1 TO STOP; 2 TO CONTINUE”; 
250 INPUT T 
260 IF T <> 1 THEN 120 
270 END 
RUN 


PAIRS OF FACTORS 


TYPE THE INTEGER? 8960 
THE PAIRS OF FACTORS OF 8960 ARE: 


1 8960 
2: 4480 
4 2240 
5) 1792 
7 1280 
8 1120 
10 896 
14 640 
16 560 
20 448 
28 320 
32 280 
85 256 
40 224 
56 160 
64 140 
70 128 
80 112 


TYPE | TO STOP ; 2 TO CONTINUE?2 
TYPE THE INTEGER ? 4680 


194 Primality Testing and Factoring 


THE PAIRS OF FACTORS OF 4680 ARE : 


1 4680 
2) 2340 
3 1560 
4 1170 
5 936 
6 780 
8 585 
") 520 
10 468 
12 390 
13 360 
15 312 
18 260 
20 234, 
24 195 
26 180 
30 156 
36 130 
39 120 
40 117 
45 104 
52 90 
60 78 
65 (P 
TYPE 1 TO STOP; 2 TO CONTINUE ? 1 
EXERCISE 
1. Find all bases for which 21 is a pseudoprime. 
2. Prove that no integer of the form n = 3p (with p > 3 prime) can be 
pseudoprime to the base 2, 5 or 7. 
3. prove that 91 is the smallest pseudoprime to the base 3. 
4. Prove that 341 is the smallest pseudoprime to the base 2. 
5. Letn=pq bea product of two distinct primes. Let d = ged(p-1, q-1) 


prove that n is a pseudoprime to the base b if and only of b4 = 1 (mod 
n). 
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6. 


Prove that there are infinitely many pseudoprime to the base b for 
b=2, 3, 5. 


Show by pseudoprime primality test that 2047 = 2!! -1 is composite. 
Show that the following are Carmichael numbers, 
6601 , 29341, 172081 , 2465. 


Show that 65 is a strong pseudoprime to the base 8 and to the base 18, 
but not to the base 14. 


Factor n = 8051 using rho method with f(x) = x? + 1, x9 = 1. 
Factor 2701 with f (x) = x3 =x +1, x)=1. 

Use Fermat factorization to factor : (a) 809009 (b) 8633 (d) 4601. 
Prove that all Carmichael numbers are odd. 

Verify that 2047 is the smallest strong pseudoprime to the base 2. 


Show that 2047 is a composite number using strong pseudoprime 
primality test. 


oo 


ANSWER TO EXERCISES 


oN DY 


CHAPTER II. 
(i) 2592 ( ii) 22400 (iii ) 1800 (iv) 320204 (v) 312 (vi) 720 
(viii) 1152 


CHAPTER III. 


89. 

(a) No solution 

(b) x = 45,94 (mod 98) 

(c) x = 16, 59, 102 , 145, 188, 231 and 274 (mod 301) 

(d) x = 6, 13 and 20 (mod 21) 

(a) x = 4944 (mod 9889) (b) x = 785 (mod 1122) (c) x = 52 
(mod 105) 

13 e 

x = 3,4, 10, 39 (mod 7) are only solutions of the congruence 
15 

BUS. 

82, 43 

23 


CHAPTER IV. NIL 
CHAPTER Y. NIL 


Answer to Exercises 


CHAPTER VI. 
indy 5 = 9, indg 5 = 9, ind7 5 = 3, ind,; 5 =3. 
14 
x = 7, 8 and 11 (mod 13). 

(i) xs 7 ea ene sed 
(ii)x = 22 + 23 t,t =0, +1,42,... 
(iii) x = 7, 29, 57, ..., -15, -37. 
6. Solvable. 
7. b=1, 3, 9(mod 13) 
8. (a)x =7(mod 11) 
(b) x = 5, 6(mod 11) 
(c) No solution . 
10. None — 


b eee olen dete 


CHAPTER VII. 
2 (i)-1, (ii) -1, (iii) -1 (iv) 1 (v) +1 (vi) +1. 
5. x =1,3,4,9,10,12 (mod 13 ) 
(a) solvable (b) Not solvable (c) solvable 10. (a) —1, (b) -1, 
(c) 1 


CHAPTER VIII. 
68,13 
10 83;,97 
11. 37. 73 
12. (a) 823. 983 
(b) 89.97 
(c) 43.107. 


oo 
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APPENDIX 


THE CHRONOLOGY OF PRIME NUMBER RECORDS 


The Largest Known Prime Records. 

On January 27, 1998, the team of Roland Clarkson, George Woltman, Scott 
Kurowskii et al discovered a new prime record: 23071377 _ 1 Tn June 1999 
largest known prime 2 gee having 2,098,960 ‘ 'gits in found by Nayan 


Hajratwala. 


a 


Jan 1998 909526 Clarkson, Woltman, 
Kurowski, et al. (GIMPS) 
895932 Spence, Woltman, et al. 
(GIMPS) 


Aug 1997 
420921 Armengaud, Woltman, 
et al (GIMPS) 
A 


Nov 1996 


Sep 1996 378632 Slowinski and Gage 
Jan 1994 258716 Slowinski and Gage 
Feb 1992 227832 Slowinski and Gage 


ug 1989] 391581-27!6!95 _1 | 65087 | Brown. Noll, Parady, Smith 
ie el eee 
IO a 
Cer ary 


- 13395 Nelson and Slowinski 
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2 Nickel and Noll 
Tuckerman 
Deena! Hurwitz 
cue 
9228 Robinson 
has Robinson 
180-@127 — 1)? +1 Miller and Wheeler 
(2'48 41/17 Ferrier 
1876 Pear 3a | Lucas 
(2° + 13.107) Landry 
999999000001 Looff 
2-1 Euler 


-1 
-1 


ie md 
5 is 
| | I 
a — 
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THE TWIN PRIME RECORDS 


On August 31, 1998, Ray Ballinger has founda 11751 digits twin primes record 
with “Proth” written by Yves Gallot; 835335-2320!44, 


Aug 1998 8353352990144 
Gallot 


Nov 1995 11713 Indlekofer and 
Jarai 
Oct 1995 570918348-29!2041 5129 


Nov 1994 697053813-2!93924] 4932 Indlekofer and 
Jarai 


1989 1706595-2!!23544 3389 


11751 Ballinger and 


242206083-23888044 


Brown. Noll, 
Parady, 
Smith G, Smith J 
and Zarantonello 


Appendix 201 
THE MERSENNE PRIME RECORDS 


Mersens primes are of the form 2? — 1. 
On January 27, 1998, the team of Roland Clarkson, George Woltman, Scott 
Kurowskii et al discovered a new prime record: QeaieT7 Ny, 


Digits Who 
909526 Clarkson, \\oltman, 
Kurowski, et al. (GIMPS) 


895932 Spence, Woltman, 
et al. (GIMPS) 
Armengaud, Woltman, 
et al (GIMPS) 


Jan 1998 


Aug 1997 


Sep 1996 


378632 Slowinski and Gage 
258716 Slowinski and Gage 
Feb 1992 227832 Slowinski and Gage 


| Digits | 
nae 
Peale 
| 227822... 

Aug 1989 307581271072 an Brown. Noll, Parady, 
Smith G, Smith J 
and Zarantonello 

iw nek 
| 39751_| 
| 25962 | 
| 13395 _| 
| 6987 | 
[6533 | 
| 3376 | 
| 1332_| 
mE 
| 687 | 


Jan 1994 


ae BEET 


1979 


iw) 
BI 
BI 


-1 13395 Nelson and Slowinski 
FIV a 
Oct 1978 6533 Nickel and Noll 

-1 

-1 


ie 
n 
nN 
| 

lon 


m 


The 38th Mersenne prime is 2°72 —1 is found in June 1998 


~ No} 
~ n 
: 

| 
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Number of the form n! + 1 are called factorial primes. 

CM ee A ee a 
a ECE 
[son frome | ca 
ce a 
I 
eT 


Primorial Primes are of the form 2.3.5... . p+l. 


[baie Time [igs [We J 
I 
a 
OE 
I 


2657# +1 1115 | Buhler, Crandall and Penk 
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